Update dependency @biomejs/biome to v2.5.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@biomejs/biome (source)	2.5.0 → 2.5.1

---

Release Notes

biomejs/biome (@​biomejs/biome)

v2.5.1

Compare Source

Patch Changes

• #​10722 f8a303d Thanks @​denbezrukov! - Fixed CSS formatter output for comments between import media queries.

  -@​import url("print.css") print,
  -/* comment */
  -screen;
  +@​import url("print.css") print, /* comment */ screen;

• #​10738 9fdc560 Thanks @​JamBalaya56562! - Fixed #​9899: the json and json-pretty reporters now escape backslashes in a diagnostic's location.path. Previously, paths containing backslashes (such as Windows-style paths) were emitted unescaped, producing invalid JSON.

  -    "path": "src\account\setup-passkey.tsx",
  +    "path": "src\\account\\setup-passkey.tsx",

• #​10626 5f837df Thanks @​tom-groves! - Fixed #​10625: biome migrate no longer emits an invalid trailing comma when a renamed rule (such as noConsoleLog → noConsole) is the last member of its rule group. Previously this produced malformed output that aborted the migration of a strict-JSON biome.json with a parsing error.

• #​10535 c245f9d Thanks @​Mokto! - Fixed a false positive in noUnusedVariables for Svelte files where variables referenced inside {@​html expr} blocks were incorrectly reported as unused.

• #​10668 a0f197e Thanks @​Netail! - The biome init command has been updated to include a more up-to-date URL to the first-party extensions page.

• #​10667 d8c3e87 Thanks @​Netail! - Fixed #​10664: useErrorCause now correctly detects a shorthand property.

• #​10696 ef2373f Thanks @​ematipico! - Fixed #​9566. Improved how the Biome Language Server loads multiple configuration files inside a workspace.

• #​10705 4ccb410 Thanks @​ematipico! - Fixed #​10652. Biome plugins are now properly filtered when using --only and --skip flags.

• #​10669 aa0a6eb Thanks @​Netail! - Fixed #​10651: useInlineScriptId now correctly trims trivia to detect if an id attribute has been set.

• #​10689 844b1be Thanks @​ematipico! - Fixed #​10658. The issue was caused by the "Go-to definition" editor feature, which was enabled by default. The feature is now disabled by default. To work, the feature triggers the scanner to build the module graph. This caused memory leak issues in cases where Biome starts in the home directory to modify files.

  If you relied on this new feature, you must now turn on using the [editor settings] of the extension e.g. Zed and VSCode.

• #​10695 043fbb5 Thanks @​ematipico! - Fixed #​10674. Biome now throws an error when the field level is missing from a rule option.

• #​10712 5941df2 Thanks @​Conaclos! - Improved the diagnostic and the documentation of useFlatMap.

• #​10615 23814f1 Thanks @​qwertycxz! - Improved the DX the JSON schema when it's used by certain code editors like VSCode.

• #​10688 ec69489 Thanks @​ematipico! - Fixed a bug where the Biome Daemon did not correctly shut down when the editor was closed during an in-progress operation, especially while scanning.

• #​10701 6c2e0d7 Thanks @​ematipico! - Fixed #​10694. The Biome Language Server no longer prints an error when the user hovers a variable imported from node_modules.

• #​10681 888515b Thanks @​Conaclos! - Fixed useExportType that reported useless details in some diagnostics.

• #​10220 3694a13 Thanks @​theBGuy! - Fixed useAnchorContent false positive for <a> elements used as render prop values (e.g. render={<a href="..." />}), a pattern where the receiving component renders its children inside the anchor element.

• #​10702 98823fb Thanks @​ematipico! - Fixed #​10612. The Biome parser now correctly parses processing instructions. The following SVG doesn't throw errors anymore:

  <?xml version="1.0" encoding="UTF-8" ?>
  
  <svg></svg>

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

• 🔍 Trigger a full review

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report