Skip to content

fix(deps): update all non-major dependencies - #873

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch
Open

fix(deps): update all non-major dependencies#873
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Oct 12, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@base-ui/react (source) 1.8.0 → 1.9.0 age confidence dependencies minor
@biomejs/biome (source) 2.5.14 → 2.5.15 age confidence devDependencies patch
@deepseek-ai/cordis (source) 4.0.2 → 4.0.5 age confidence dependencies patch
@noble/curves (source) 2.0.1 → 2.4.0 age confidence dependencies minor
@tabler/icons (source) 3.46.0 → 3.49.0 age confidence dependencies minor
@tabler/icons-react (source) 3.46.0 → 3.49.0 age confidence dependencies minor
@tauri-apps/plugin-updater 2.13.3 → 2.14.0 age confidence dependencies minor
@types/node (source) 24.13.6 → 24.19.2 age confidence devDependencies minor
@vitejs/plugin-react (source) 6.1.1 → 6.1.2 age confidence devDependencies patch
actions/download-artifact v8.0.1 → v8.0.2 age confidence action patch
actions/upload-artifact v7.0.1 → v7.0.2 age confidence action patch
arboard 3.6.1 → 3.7.0 age confidence dependencies minor
base64 0.22 → 0.23 age confidence dependencies minor
bech32 0.11 → 0.12 age confidence dependencies minor
crc32fast 1.5.1 → 1.5.2 age confidence dev-dependencies patch
dockview-react (source) 8.3.1 → 8.6.0 age confidence dependencies minor
flexlayout-react 0.11.0 → 0.11.1 age confidence dependencies patch
getrandom 0.3 → 0.4 age confidence dependencies minor
hmac 0.12 → 0.13 age confidence dependencies minor
hyper (source) 1.11.1 → 1.12.0 age confidence dependencies minor
hyper-util (source) 0.1.20 → 0.1.21 age confidence dependencies patch
jsdom 30.1.0 → 30.1.3 age confidence devDependencies patch
libc 0.2.189 → 0.2.191 age confidence dependencies patch
mdast-util-from-markdown 2.0.3 → 2.1.0 age confidence dependencies minor
mdast-util-gfm-strikethrough 2.0.0 → 2.0.1 age confidence dependencies patch
mdast-util-to-markdown 2.1.2 → 2.2.0 age confidence dependencies minor
micromark-extension-gfm-table 2.1.1 → 2.1.2 age confidence dependencies patch
motion 12.40.0 → 12.43.0 age confidence dependencies minor
nostr (source) 0.44 → 0.45 age confidence dependencies minor
nostr-pairing (source) 0.44 → 0.45 age confidence dependencies minor
objc2 =0.6.4 → =0.6.5 age confidence dependencies patch
pnpm/action-setup v4.3.0 → v4.4.0 age confidence action minor
postcss (source) 8.5.28 → 8.5.30 age confidence devDependencies patch 8.5.31
proptest (source) 1.11.0 → 1.12.0 age confidence dev-dependencies minor
prosemirror-commands 1.7.1 → 1.7.2 age confidence dependencies patch
prosemirror-history 1.5.0 → 1.5.1 age confidence dependencies patch
prosemirror-model 1.25.8 → 1.25.12 age confidence dependencies patch
prosemirror-view 1.42.3 → 1.42.6 age confidence dependencies patch
rand (source) 0.10.2 → 0.10.3 age confidence dependencies patch
react-day-picker (source) 10.0.1 → 10.0.2 age confidence dependencies patch
react-diff-view 3.3.2 → 3.3.3 age confidence dependencies patch
reqwest 0.13.4 → 0.13.5 age confidence dependencies patch
rfd 0.16 → 0.17 age confidence dependencies minor
rolldown (source) 1.2.7 → 1.2.14 age confidence devDependencies patch
rusqlite 0.38 → 0.40 age confidence dependencies minor
rust-ini =0.21.1 → =0.21.3 age confidence dependencies patch
secp256k1 0.31 → 0.33 age confidence dev-dependencies minor
secp256k1 0.31 → 0.33 age confidence dependencies minor
serde_json 1.0.151 → 1.0.154 age confidence dependencies patch
tauri-plugin-updater ~2.13.3 → ~2.14.0 age confidence dependencies minor
thiserror 2.0.20 → 2.0.21 age confidence dependencies patch
tokio (source) 1.53.1 → 1.53.3 age confidence dev-dependencies patch
tokio (source) 1.53.1 → 1.53.3 age confidence dependencies patch
tokio-rustls 0.26.5 → 0.26.6 age confidence dev-dependencies patch
tokio-tungstenite 0.29 → 0.30 age confidence dependencies minor
tokio-util (source) 0.7.19 → 0.7.20 age confidence dependencies patch
undici (source) 7.29.1 → 7.30.1 age confidence devDependencies minor
uuid 1.26.0 → 1.28.0 age confidence dependencies minor
vite (source) 8.3.0 → 8.3.4 age confidence devDependencies patch
windows-core =0.62.2 → =0.100.0 age confidence dependencies minor
zeroize 1.9.0 → 1.9.1 age confidence dependencies patch

Release Notes

mui/base-ui (@​base-ui/react)

v1.9.0

Compare Source

Oct 9, 2026

General changes
Accordion
Alert Dialog
  • Don't associate a programmatically opened popup with a trigger that did not open it (#​5641) by @​michaldudak
Autocomplete
  • Fix autoHighlight for asynchronous results (#​5818) by @​atomiks
  • Pass the originating event to onItemHighlighted. Pointer events may be MouseEvent or PointerEvent; typing reports the reason none (#​5838) by @​atomiks
  • Decouple automatic unmounting from actionsRef. Call eventDetails.preventUnmountOnClose() in onOpenChange to opt out of automatic unmounting (#​5734) by @​michaldudak
Checkbox
Collapsible
Combobox
Dialog
  • Keep parent open when closing a nested dialog in a closed shadow root (#​5780) by @​atomiks
  • Don't associate a programmatically opened popup with a trigger that did not open it (#​5641) by @​michaldudak
Drawer
Field
Menu
Number Field
OTP Field
Popover
Preview Card
Radio Group
Scroll Area
Select
Slider
Switch
Tabs
Toast
Tooltip

All contributors of this release in alphabetical order: @​aarongarciah, @​atomiks, @​brijeshb42, @​citrus, @​cpruijsen, @​flaviendelangle, @​jjenzz, @​LukasTy, @​lyzno1, @​mdm317, @​michaldudak, @​MonstraG, @​padd60, @​sai6855, @​santiago-ramos-02, @​sarthakmalik0810, @​superhooman, @​tjdsksro90

biomejs/biome (@​biomejs/biome)

v2.5.15

Compare Source

Patch Changes

  • #​10634 b436ba0 Thanks @​subaru-hello! - Added the new nursery rule noReactObjectTypeAsDefaultProp, which disallows array, object, and function values as default props in React components.

    For example, the following snippet triggers the rule.

    function Component({ items = [] }) {
  return items;
}

  • #​11956 faa8b37 Thanks @​dyc3! - Added the nursery rule noSvelteExportLet, which disallows declaring Svelte component props with the legacy export let syntax. Use the $props() rune instead.

    <script>
  export let name;
</script>

  • #​10816 1b9479e Thanks @​Th3S4mur41! - Added a new nursery rule useLogicalProperties that enforces the use of logical properties in CSS, promoting better internationalization and accessibility practices. The rule supports a direction option with "ltr" as the default and "rtl" as the alternative.
    This is a first rule covering parts of #​9034

    {
  "linter": {
    "rules": {
      "nursery": {
        "useLogicalProperties": {
          "level": "warn",
          "options": {
            "direction": "rtl"
          }
        }
      }
    }
  }
}

  • #​11960 1fdb5c2 Thanks @​dyc3! - Added the nursery rule useSvelteKitRuneImports, which reports imports from the deprecated $app/stores module and suggests $app/state instead.

    import { page } from "$app/stores";

  • #​11723 3b429d1 Thanks @​m1handr! - Fixed #​11656: noAstroSetHtmlDirective now correctly reports set:html directives inside Astro template expressions.

  • #​12023 874d5ae Thanks @​codspeed! - Improved the performance of the HTML formatter up to 4x.

  • #​11761 a3462fe Thanks @​saberoueslati! - Fixed #​11351: useSimplifiedLogicExpression no longer reports boolean literals on the right side of || and && outside boolean contexts, because removing them can change the result of the expression. For example, y = x || false is no longer reported, while if (x || false) still is.

  • #​11732 ff4c4dd Thanks @​dyc3! - Added the nursery rule noMeaninglessVoidOperator, which reports unnecessary uses of void, such as void log() when log returns void. The rule allows discarded call results, thenables, void 0, and calls returning never.

  • #​11975 40dd3fb Thanks @​ematipico! - Fixed the indentation of multiline Astro expressions, in templates and attribute values, when running biome check --write. Biome now formats Astro expressions with biome format too, and places them at the column of the surrounding markup.

     <div>
 	{items.map((item) => (
-	<span>{item}</span>
-))}
+		<span>{item}</span>
+	))}
 </div>

  • #​12016 09d4000 Thanks @​codspeed! - Improved the performance of indexing and analysis of big files up to 2x. The improvements are mostly visible in projects that make use of project and types lint rules.

  • #​11750 089bde0 Thanks @​dyc3! - Added the nursery rule useStrictBooleanExpressions, which reports ambiguous truthiness checks such as if (value) when value has type number | undefined. Non-nullable strings and numbers and nullable objects are allowed; the rule has no options.

  • #​11494 ad5b362 Thanks @​jp-knj! - Added the nursery rule noAstroConflictingSetDirectives, which reports Astro elements with multiple content sources, such as set:html, set:text, and child content.

    For example, <div set:html={html}>content</div> triggers the rule.

  • #​11878 84d1b3b Thanks @​dyc3! - Fixed #​11748: useExhaustiveSwitchCases now reports missing cases for values created with the mapping overload of Array.from, including arrays imported from another module.

  • #​11802 7d1f37e Thanks @​dyc3! - Tailwind classes will now be detected in Svelte, Vue, and Astro class attribute expressions that don't use a class merging function.

  • #​11910 9e50ea2 Thanks @​ematipico! - Fixed #​11504, a regression where Biome would silently ignore errors in the configuration file. Now errors are correctly retained and checked before executing any command.

  • #​11921 d568632 Thanks @​hirehamir! - Fixed #​10846: when plugins fail to load, Biome now prints each failing plugin's path on its own line, instead of concatenating bare messages like Cannot read file.Cannot read file..

  • #​11930 82ea5a6 Thanks @​dyc3! - Fixed #​11927: The HTML formatter no longer duplicates comments around Svelte blocks. This affected a comment after a block such as {#if} or {#each} at the end of an element, and a comment on the same line as the last element inside a block, before {:else}, {/if}, or a similar tag.

  • #​11931 0cc46d8 Thanks @​dyc3! - Fixed the indentation of comments at the end of a Svelte block's contents. A comment before {:else}, {:then}, {/if}, or a similar tag is now indented with the block's contents instead of with the tag.

     {#if condition}
 	<span>Text</span>
-<!-- comment -->
+	<!-- comment -->
 {/if}

  • #​12031 ef0edd4 Thanks @​dyc3! - Fixed #​12027: Biome's test rules no longer mistake regular method calls named test, it, or describe for tests. For example, useValidTestTitle used to report the following regular expression check as a test with an invalid title:

    const isComment = /^\s*#/.test(line);

  • #​11959 8477e61 Thanks @​dyc3! - Fixed #​11950: noUnusedVariables now reports arrow functions with expression bodies that only reference themselves, such as let h = () => h();.

  • #​11915 3260602 Thanks @​ematipico! - Fixed #​11841, where suppression comments had no effect on some parts of HTML-ish files and on snippets embedded in JavaScript files.

    Now the following suppression works as expected:

    <!-- biome-ignore lint/correctness/noUndeclaredVariables: intentionally external -->
<div :title="missingValue"></div>

  • #​11952 b51040e Thanks @​dyc3! - Fixed #​11951: the GritQL formatter no longer inserts a space after a within pattern without an until clause.

    -$arg <: within `bar($_)` ,
+$arg <: within `bar($_)`,

  • #​11794 429cf95 Thanks @​dyc3! - Added the nursery rule noTailwindRawColors for JavaScript and HTML. It disallows Tailwind palette colors such as bg-pink-500 and text-white, encouraging design system color utilities such as bg-primary.

  • #​11837 f5e249b Thanks @​dyc3! - Fixed #​11836: biome check --write no longer adds invalid parentheses around Svelte {@const} declarations when experimental HTML support and formatting are enabled.

  • #​11978 8be0b9e Thanks @​dyc3! - Fixed #​11817: Biome no longer crashes when its output is piped to a program that exits early, such as head. Output to the closed pipe is now discarded and Biome exits normally.

  • #​11868 3841c26 Thanks @​ematipico! - Fixed #​8986: Biome's language server now scopes all watched-file patterns to each workspace folder, falling back to the deprecated rootUri when no workspace folders are provided. Clients without relative-pattern support receive compatible absolute glob patterns.

  • #​11928 0015681 Thanks @​dyc3! - Restricted access to the Unix daemon socket to the user running Biome. The socket now lives in a biome-daemon directory inside Biome's cache directory that only this user can access, and the socket itself has mode 0600.

  • #​11835 589ca1a Thanks @​dyc3! - Updated useReactCompiler: Biome now reports React Compiler diagnostics regardless of the React version declared in package.json.

  • #​11907 b7d9037 Thanks @​posido! - Fixed withastro/compiler-rs#194: the HTML parser no longer treats a regex literal that starts with > as the end of a self-closing tag. Astro frontmatter such as const escaped = s.replace(/>/g, "&gt;"); no longer swallows the closing --- fence, and the same regex inside a template expression no longer runs past its closing }. A regex literal after a keyword such as return, as in return />'/.test(s), is now recognized too.

  • #​12021 59cc595 Thanks @​dyc3! - Type inference performance has been significantly improved. Some popular libraries like Zod, Valibot, Arktype, Effect, Kysely, and Drizzle have gained a ~2-240x speedup i

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team as a code owner October 12, 2026 01:00
@renovate

renovate Bot commented Oct 12, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: pnpm-lock.yaml
? Verifying lockfile against supply-chain policies (392 entries)...
Progress: resolved 1, reused 0, downloaded 0, added 0
Progress: resolved 52, reused 0, downloaded 0, added 0
Progress: resolved 64, reused 0, downloaded 0, added 0
Progress: resolved 166, reused 0, downloaded 0, added 0
✓ Lockfile passes supply-chain policies (392 entries in 4s)
Progress: resolved 254, reused 0, downloaded 0, added 0
Progress: resolved 368, reused 0, downloaded 0, added 0
[ERR_PNPM_UNUSED_PATCH] The following patches were not used: @base-ui/react@1.8.0

Either remove them from "patchedDependencies" or update them to match packages in your dependencies.

@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 28 times, most recently from 8263abd to d0b8a73 Compare October 13, 2026 00:49
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from 9921d05 to d9b2aaf Compare October 13, 2026 17:25
@renovate renovate Bot changed the title Update all non-major dependencies fix(deps): update all non-major dependencies Oct 13, 2026
@renovate
renovate Bot force-pushed the renovate/all-minor-patch branch 20 times, most recently from 15357d5 to 7fa0baa Compare October 13, 2026 20:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants