An open index of dependabot pull requests across open source projects.

build(deps-dev): bump the dev-deps group across 1 directory with 5 updates

Open
Number: #290
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 1
Created: September 22, 2025 at 11:18 AM UTC
(3 months ago)
Updated: September 22, 2025 at 02:49 PM UTC
(3 months ago)
Labels:
dependencies javascript
Description:

Bumps the dev-deps group with 5 updates in the / directory:

Package From To
@biomejs/biome 2.2.3 2.2.4
@types/node 24.3.1 24.5.2
@types/react 19.1.12 19.1.13
@vitejs/plugin-react 5.0.2 5.0.3
lefthook 1.12.4 1.13.2

Updates @biomejs/biome from 2.2.3 to 2.2.4

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.2.4

2.2.4

Patch Changes

  • #7453 aa8cea3 Thanks @​arendjr! - Fixed #7242: Aliases specified in package.json's imports section now support having multiple targets as part of an array.

  • #7454 ac17183 Thanks @​arendjr! - Greatly improved performance of noImportCycles by eliminating allocations.

    In one repository, the total runtime of Biome with only noImportCycles enabled went from ~23s down to ~4s.

  • #7447 7139aad Thanks @​rriski! - Fixes #7446. The GritQL $... spread metavariable now correctly matches members in object literals, aligning its behavior with arrays and function calls.

  • #6710 98cf9af Thanks @​arendjr! - Fixed #4723: Type inference now recognises index signatures and their accesses when they are being indexed as a string.

    Example

    type BagOfPromises = {
      // This is an index signature definition. It declares that instances of type
      // `BagOfPromises` can be indexed using arbitrary strings.
      [property: string]: Promise<void>;
    };
    

    let bag: BagOfPromises = {}; // Because bag.iAmAPromise is equivalent to bag[&quot;iAmAPromise&quot;], this is // considered an access to the string index, and a Promise is expected. bag.iAmAPromise;

  • #7415 d042f18 Thanks @​qraqras! - Fixed #7212, now the useOptionalChain rule recognizes optional chaining using typeof (e.g., typeof foo !== 'undefined' && foo.bar).

  • #7419 576baf4 Thanks @​Conaclos! - Fixed #7323. noUnusedPrivateClassMembers no longer reports as unused TypeScript private members if the rule encounters a computed access on this.

    In the following example, member as previously reported as unused. It is no longer reported.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.2.4

Patch Changes

  • #7453 aa8cea3 Thanks @​arendjr! - Fixed #7242: Aliases specified in package.json's imports section now support having multiple targets as part of an array.

  • #7454 ac17183 Thanks @​arendjr! - Greatly improved performance of noImportCycles by eliminating allocations.

    In one repository, the total runtime of Biome with only noImportCycles enabled went from ~23s down to ~4s.

  • #7447 7139aad Thanks @​rriski! - Fixes #7446. The GritQL $... spread metavariable now correctly matches members in object literals, aligning its behavior with arrays and function calls.

  • #6710 98cf9af Thanks @​arendjr! - Fixed #4723: Type inference now recognises index signatures and their accesses when they are being indexed as a string.

    Example

    type BagOfPromises = {
      // This is an index signature definition. It declares that instances of type
      // `BagOfPromises` can be indexed using arbitrary strings.
      [property: string]: Promise<void>;
    };
    

    let bag: BagOfPromises = {}; // Because bag.iAmAPromise is equivalent to bag[&quot;iAmAPromise&quot;], this is // considered an access to the string index, and a Promise is expected. bag.iAmAPromise;

  • #7415 d042f18 Thanks @​qraqras! - Fixed #7212, now the useOptionalChain rule recognizes optional chaining using typeof (e.g., typeof foo !== 'undefined' && foo.bar).

  • #7419 576baf4 Thanks @​Conaclos! - Fixed #7323. noUnusedPrivateClassMembers no longer reports as unused TypeScript private members if the rule encounters a computed access on this.

    In the following example, member as previously reported as unused. It is no longer reported.

    class TsBioo {
      private member: number;
    

    set_with_name(name: string, value: number) { this[name] = value; } }

... (truncated)

Commits

Updates @types/node from 24.3.1 to 24.5.2

Commits

Updates @types/react from 19.1.12 to 19.1.13

Commits

Updates @vitejs/plugin-react from 5.0.2 to 5.0.3

Release notes

Sourced from @​vitejs/plugin-react's releases.

plugin-react@5.0.3

HMR did not work for components imported with queries with rolldown-vite (#872)

Perf: simplify refresh wrapper generation (#835)

Changelog

Sourced from @​vitejs/plugin-react's changelog.

5.0.3 (2025-09-17)

HMR did not work for components imported with queries with rolldown-vite (#872)

Perf: simplify refresh wrapper generation (#835)

Commits
  • 8293cb3 release: plugin-react@5.0.3
  • 89ec16d fix(react): hmr did not work for components imported with queries with rolldo...
  • 3a8b4a9 perf: avoid sourcemap for refresh wrapper injection (#835)
  • afa28f1 fix(deps): update all non-major dependencies (#823)
  • 437bab2 fix(deps): update all non-major dependencies (#809)
  • See full diff in compare view

Updates lefthook from 1.12.4 to 1.13.2

Release notes

Sourced from lefthook's releases.

v1.13.2

Changelog

  • 720199a6e59dce9b5211b815c65efe8f0b7be169 feat: inherit file_types from parent jobs (#1135)
  • 3f84827ee4f07c82ce76e3947538ac222f761af0 fix: move gen at root (#1133)
  • 0ae7b1664d1bdce3b52138fae2299c40e5e09998 refactor: better scope subpackages (#1132)

v1.13.1

Changelog

  • 884936b542a3535a43ab91a5e419baf159919d11 chore: update issue templates
  • ea6bc864a7a5040bc029080e54f1706e533c72a1 feat: add no stage fixed argument (#1130)
  • bb0b49517d4a3b03f5924c374536ba92077d7264 fix: re-evaluate status for changeset (#1129)
  • 78b307e0fa2cdd2798b1d1f587b6bebe3957bc99 refactor: reduce the amount of code in a single file (#1118)
  • ef680577ba630e9bd6c3b96c169c09f2bb34516a refactor: reduce the amount of code in a single file (#1131)

v1.13.0

Changelog

  • 379d1fb0e7711ab3252732d84e103b33f22b9a03 chore: simplify PR template
  • 6e0e843857eae86d98afe7f62edd200a7c040660 feat: fail on change (#1095)
  • 8aba4e3063059f604694f73847a8d9916a3475b4 feat: recursively log successful results in summary (#1108)
  • 97734e3afc830c0973dddfcfad28edeb2f368940 fix: add mutex to prevent concurrent git adds (#1115)
  • 85521644812563675250bda68860f3de60a4425c fix: groups with successes and skips are successful (#1107)
  • 0b679d01a02b90dd7d8a97ee79adc22497dc0882 fix: set --force for git add command (#1104)
  • 69679a987e24de54f9ac2f10d2518564e7a50dda fix: use batched cmd for calculating git hashes (#1116)
  • 1b42ebb2a1519a602c7db1098493a143462e1444 refactor: improve structuring (#1103)
Changelog

Sourced from lefthook's changelog.

1.13.2 (2025-09-22)

1.13.1 (2025-09-17)

1.13.0 (2025-09-11)

Commits
  • 5fb49ab 1.13.2: inherit file_types filter in jobs hierarchy
  • 720199a feat: inherit file_types from parent jobs (#1135)
  • 3f84827 fix: move gen at root (#1133)
  • 0ae7b16 refactor: better scope subpackages (#1132)
  • 311971a 1.13.1: fixes for fail_on_changes and added --no-stage-fixed arg
  • ea6bc86 feat: add no stage fixed argument (#1130)
  • ef68057 refactor: reduce the amount of code in a single file (#1131)
  • bb0b495 fix: re-evaluate status for changeset (#1129)
  • 78b307e refactor: reduce the amount of code in a single file (#1118)
  • 884936b chore: update issue templates
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
0
Files Changed:
0
Additions:
+0
Deletions:
-0
Package Dependencies
Ecosystem:
npm
Version Change:
5.0.2 → 5.0.3
Update Type:
Patch
Package:
@types/node
Ecosystem:
npm
Version Change:
24.3.1 → 24.5.2
Update Type:
Minor
Ecosystem:
npm
Version Change:
19.1.12 → 19.1.13
Update Type:
Patch
Ecosystem:
npm
Version Change:
2.2.3 → 2.2.4
Update Type:
Patch
Package:
lefthook
Ecosystem:
npm
Version Change:
1.12.4 → 1.13.2
Update Type:
Minor
Technical Details
ID: 8206257
UUID: 3440445037
Node ID: PR_kwDOAStzNM6p0Kk2
Host: GitHub
Repository: nicholasdevries/nicholasdevries.github.io