search

OpenINF / openinf.github.io

⚡🐋 The OpenINF portal, other static resources, and more static electricity
https://open.inf.is
5 stars 3 forks source link

build(deps-dev): bump all #1272

Closed renovate[bot] closed 2 months ago

renovate[bot] commented 2 months ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
@biomejs/biome (source) 1.7.3 -> 1.8.1 age adoption passing confidence devDependencies minor
@devcontainers/cli 0.62.0 -> 0.64.0 age adoption passing confidence devDependencies minor
actions/checkout v4.1.6 -> v4.1.7 age adoption passing confidence action patch
cspell (source) 8.8.3 -> 8.8.4 age adoption passing confidence devDependencies patch
cssnano 7.0.1 -> 7.0.2 age adoption passing confidence devDependencies patch
dprint 0.46.1 -> 0.46.2 age adoption passing confidence devDependencies patch
editorconfig-checker 5.1.5 -> 5.1.8 age adoption passing confidence devDependencies patch
github/codeql-action v3.25.7 -> v3.25.10 age adoption passing confidence action patch
pnpm (source) 9.1.4 -> 9.3.0 age adoption passing confidence packageManager minor
pnpm (source) 9.1.4 -> 9.3.0 age adoption passing confidence engines minor
prettier (source) 3.3.0 -> 3.3.2 age adoption passing confidence devDependencies patch
returntocorp/semgrep cffeb57 -> 550dfda container digest
ruby (source) 3.3.2 -> 3.3.3 age adoption passing confidence patch
ruby/setup-ruby v1.178.0 -> v1.180.0 age adoption passing confidence action minor

Release Notes

biomejs/biome (@​biomejs/biome) ### [`v1.8.1`](https://togithub.com/biomejs/biome/blob/HEAD/CHANGELOG.md#v181-2024-06-10) [Compare Source](https://togithub.com/biomejs/biome/compare/378c05edd47608a1b8cba725564c807b2e772bd6...39db99b1cd087d6aa46ecfecba6adbfa0d45a303) ##### Analyzer ##### CLI ##### Bug fixes - Fix [#​3069](https://togithub.com/biomejs/biome/issues/3069), prevent overwriting paths when using `--staged` or `--changed` options. Contributed by [@​unvalley](https://togithub.com/unvalley) - Fix a case where the file link inside a diagnostic wasn't correctly displayed inside a terminal run by VSCode. Contributed by [@​uncenter](https://togithub.com/uncenter) ##### Configuration ##### Bug fixes - Fix [#​3067](https://togithub.com/biomejs/biome/issues/3067), by assigning the correct default value to `indentWidth`. Contributed by [@​ematipico](https://togithub.com/ematipico) ##### Editors ##### Formatter ##### Bug fixes - Fix the bug where whitespace after the & character in CSS nesting was incorrectly trimmed, ensuring proper targeting of child classes [#​3061](https://togithub.com/biomejs/biome/issues/3061). Contributed by [@​denbezrukov](https://togithub.com/denbezrukov) - Fix [#​3068](https://togithub.com/biomejs/biome/issues/3068) where the CSS formatter was inadvertently converting variable declarations and function calls to lowercase. Contributed by [@​denbezrukov](https://togithub.com/denbezrukov) - Fix the formatting of CSS grid layout properties. Contributed by [@​denbezrukov](https://togithub.com/denbezrukov) ##### JavaScript APIs ##### Linter ##### Bug fixes - The `noEmptyBlock` css lint rule now treats empty blocks containing comments as valid ones. Contributed by [@​Sec-ant](https://togithub.com/Sec-ant) - [useLiteralKeys](https://biomejs.dev/linter/rules/use-literal-keys/) no longer reports quoted member names ([#​3085](https://togithub.com/biomejs/biome/issues/3085)). Previously [useLiteralKeys](https://biomejs.dev/linter/rules/use-literal-keys/) reported quoted member names that can be unquoted. For example, the rule suggested the following fix: ```diff - const x = { "prop": 0 }; + const x = { prop: 0 }; ``` This conflicted with the option [quoteProperties](https://biomejs.dev/reference/configuration/#javascriptformatterquoteproperties) of our formatter. The rule now ignores quoted member names. Contributed by [@​Conaclos](https://togithub.com/Conaclos) - [noEmptyInterface](https://biomejs.dev/linter/rules/no-empty-interface/) now ignores empty interfaces in ambient modules ([#​3110](https://togithub.com/biomejs/biome/issues/3110)). Contributed by [@​Conaclos](https://togithub.com/Conaclos) - [noUnusedVariables](https://biomejs.dev/linter/rules/no-unused-variables/) and [noUnusedFunctionParameters](https://biomejs.dev/linter/rules/no-unused-function-parameters/) no longer report the parameters of a constructor type ([#​3135](https://togithub.com/biomejs/biome/issues/3135)). Previously, `arg` was reported as unused in a constructor type like: ```ts export type Classlike = new (arg: unknown) => string; ``` Contributed by [@​Conaclos](https://togithub.com/Conaclos) - [noStringCaseMismatch](https://biomejs.dev/linter/rules/no-string-case-mismatch/) now ignores escape sequences ([#​3134](https://togithub.com/biomejs/biome/issues/3134)). The following code is no longer reported by the rule: ```js s.toUpperCase() === "\u001b"; ``` Contributed by [@​Conaclos](https://togithub.com/Conaclos) ##### Parser ##### New features - Implemented CSS Unknown At-Rule parsing, allowing the parser to gracefully handle unsupported or unrecognized CSS at-rules. Contributed by [@​denbezrukov](https://togithub.com/denbezrukov) ##### Bug fixes - Fix [#​3055](https://togithub.com/biomejs/biome/issues/3055) CSS: Layout using named grid lines is now correctly parsed. Contributed by [@​denbezrukov](https://togithub.com/denbezrukov) - Fix [#​3091](https://togithub.com/biomejs/biome/issues/3091). Allows the parser to handle nested style rules and at-rules properly, enhancing the parser's compatibility with the CSS Nesting Module. Contributed by [@​denbezrukov](https://togithub.com/denbezrukov) ### [`v1.8.0`](https://togithub.com/biomejs/biome/blob/HEAD/CHANGELOG.md#180-2024-06-04) [Compare Source](https://togithub.com/biomejs/biome/compare/b9f90b7ee63506a1995bc29f4e389efec25a1525...378c05edd47608a1b8cba725564c807b2e772bd6) ##### Analyzer ##### New features - Allow suppression comments to suppress individual instances of rules. This is used for the lint rule `useExhaustiveDependencies`, which is now able to suppress specific dependencies. Fixes [#​2509](https://togithub.com/biomejs/biome/issues/2509). Contributed by [@​arendjr](https://togithub.com/arendjr) ##### Enhancements - Assume `Astro` object is always a global when processing `.astro` files. Contributed by [@​minht11](https://togithub.com/minht11) - Assume Vue compiler macros are globals when processing `.vue` files. ([#​2771](https://togithub.com/biomejs/biome/pull/2771)) Contributed by [@​dyc3](https://togithub.com/dyc3) ##### CLI ##### New features - New `clean` command. Use this new command to clean after the `biome-logs` directory, and remove all the log files. ```shell biome clean ``` - Add two new options `--only` and `--skip` to the command `biome lint` ([#​58](https://togithub.com/biomejs/biome/issues/58)). The `--only` option allows you to run a given rule or rule group, For example, the following command runs only the `style/useNamingConvention` and `style/noInferrableTypes` rules. If the rule is disabled in the configuration, then its severity level is set to `error` for a recommended rule or `warn` otherwise. ```shell biome lint --only=style/useNamingConvention --only=style/noInferrableTypes ``` Passing a group does not change the severity level of the rules in the group. All the disabled rules in the group will remain disabled. To ensure that the group is run, the `recommended` field of the group is enabled. The `nursery` group cannot be passed, as no rules are enabled by default in the nursery group. The `--skip` option allows you to skip the execution of a given group or a given rule. For example, the following command skips the `style` group and the `suspicious/noExplicitAny` rule. ```shell biome lint --skip=style --skip=suspicious/noExplicitAny ``` You can also use `--only` and `--skip` together. `--skip` oevrrides `--only`. The following command executes only the rules from the `style` group, but the `style/useNamingConvention` rule. ```shell biome lint --only=style --skip=style/useNamingConvention ``` These options are compatible with other options such as `--write` (previously `--apply`), and `--reporter`. Contributed by [@​Conaclos](https://togithub.com/Conaclos) - Add new command `biome clean`. Use this command to purge all the logs emitted by the Biome daemon. This command is really useful, because the Biome daemon tends log many files and contents during its lifecycle. This means that if your editor is open for hours (or even days), the `biome-logs` folder could become quite heavy. Contributed by [@​ematipico](https://togithub.com/ematipico) - Add support for formatting and linting CSS files from the CLI. These operations are **opt-in** for the time being. If you don't have a configuration file, you can enable these features with `--css-formatter-enabled` and `--css-linter-enabled`: ```shell biome check --css-formatter-enabled=true --css-linter-enabled=true ./ ``` Contributed by [@​ematipico](https://togithub.com/ematipico) - Add new CLI options to control the CSS formatting. Check the [CLI reference page](https://biomejs.dev/reference/cli/) for more details. Contributed by [@​ematipico](https://togithub.com/ematipico) - Add new options `--write`, `--fix` (alias of `--write`) and `--unsafe` to the command `biome lint` and `biome check`. Add a new option `--fix` (alias of `--write`) to the command `biome format` and `biome migrate`. ```shell biome -- [--unsafe] biome format -- biome migrate -- ``` The `biome --` has the same behavior as `biome --apply`. The `biome -- --unsafe` has the same behavior as `biome --apply-unsafe`. The `biome format --fix` has the same behavior as `biome format --write`. The `biome migrate --fix` has the same behavior as `biome migrate --write`. This change allows these commands to write modifications in the same options. With this change, the `--apply` and `--apply-unsafe` options are deprecated. Contributed by [@​unvalley](https://togithub.com/unvalley) ##### Enhancements - Biome now executes commands (lint, format, check and ci) on the working directory by default. [#​2266](https://togithub.com/biomejs/biome/issues/2266) Contributed by [@​unvalley](https://togithub.com/unvalley) ```diff - biome check . + biome check # You can run the command without the path ``` - `biome migrate eslint` now tries to convert ESLint ignore patterns into Biome ignore patterns. ESLint uses [gitignore patterns](https://git-scm.com/docs/gitignore#\_pattern_format). Biome now tries to convert these patterns into Biome ignore patterns. For example, the gitignore pattern `/src` is a relative path to the file in which it appears. Biome now recognizes this and translates this pattern to `./src`. Contributed by [@​Conaclos](https://togithub.com/Conaclos) - `biome migrate eslint` now supports the `eslintIgnore` field in `package.json`. ESLint allows the use of `package.json` as an ESLint configuration file. ESLint supports two fields: `eslintConfig` and `eslintIgnore`. Biome only supported the former. It now supports both. Contributed by [@​Conaclos](https://togithub.com/Conaclos) - `biome migrate eslint` now propagates NodeJS errors to the user. This will help users to identify why Biome is unable to load some ESLint configurations. Contributed by [@​Conaclos](https://togithub.com/Conaclos) - Add a new `--reporter` called `summary`. This reporter will print diagnostics in a different way, based on the tools (formatter, linter, etc.) that are executed. Import sorting and formatter shows the name of the files that require formatting. Instead, the linter will group the number of rules triggered and the number of errors/warnings: Formatter ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ The following files needs to be formatted: main.ts index.ts Organize Imports ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ The following files needs to have their imports sorted: main.ts index.ts Analyzer ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Some analyzer rules were triggered Rule Name Diagnostics lint/suspicious/noImplicitAnyLet 12 (12 error(s), 0 warning(s), 0 info(s)) lint/suspicious/noDoubleEquals 8 (8 error(s), 0 warning(s), 0 info(s)) lint/suspicious/noRedeclare 12 (12 error(s), 0 warning(s), 0 info(s)) lint/suspicious/noDebugger 20 (20 error(s), 0 warning(s), 0 info(s)) Contributed by [@​ematipico](https://togithub.com/ematipico) - `biome ci` now enforces printing the output using colours. If you were previously using `--colors=force`, you can remove it because it's automatically set. Contributed by [@​ematipico](https://togithub.com/ematipico) - Add a new `--reporter` called `github`. This reporter will print diagnostics using [GitHub workflow commands](https://docs.github.com/en/actions/using-workflows/workflow-commands-for-github-actions#about-workflow-commands): ::error title=lint/suspicious/noDoubleEquals,file=main.ts,line=4,endLine=4,col=3,endColumn=5::Use === instead of == ::error title=lint/suspicious/noDebugger,file=main.ts,line=6,endLine=6,col=1,endColumn=9::This is an unexpected use of the debugger statement. ::error title=lint/nursery/noEvolvingAny,file=main.ts,line=8,endLine=8,col=5,endColumn=6::This variable's type is not allowed to evolve implicitly, leading to potential any types. Contributed by [@​ematipico](https://togithub.com/ematipico) - Add a new `--reporter` called `junit`. This reporter will print diagnostics using [GitHub workflow commands](https://docs.github.com/en/actions/using-workflows/workflow-commands-for-github-actions#about-workflow-commands): ```xml line 3, col 2, Use === instead of ==. == is only allowed when comparing against `null` line 5, col 0, This is an unexpected use of the debugger statement. line 7, col 4, This variable's type is not allowed to evolve implicitly, leading to potential any types. ``` Contributed by [@​ematipico](https://togithub.com/ematipico) ##### Bug fixes - Fix [#​3024](https://togithub.com/biomejs/biome/issues/3024), where running `biome init` would create `biome.json` even if `biome.jsonc` already exists. Contributed by [@​minht11](https://togithub.com/minht11) ##### Configuration ##### New features - Add an rule option `fix` to override the code fix kind of a rule ([#​2882](https://togithub.com/biomejs/biome/issues/2882)). A rule can provide a safe or an **unsafe** code **action**. You can now tune the kind of code actions thanks to the `fix` option. This rule option takes a value among: - `none`: the rule no longer emits code actions. - `safe`: the rule emits safe code action. - `unsafe`: the rule emits unsafe code action. The following configuration disables the code actions of `noUnusedVariables`, makes the emitted code actions of `style/useConst` and `style/useTemplate` unsafe and safe respectively. ```json { "linter": { "rules": { "correctness": { "noUnusedVariables": { "level": "error", "fix": "none" }, "style": { "useConst": { "level": "warn", "fix": "unsafe" }, "useTemplate": { "level": "warn", "fix": "safe" } } } } } } ``` Contributed by [@​Conaclos](https://togithub.com/Conaclos) - Add option `javascript.linter.enabled` to control the linter for JavaScript (and its super languages) files. Contributed by [@​ematipico](https://togithub.com/ematipico) - Add option `json.linter.enabled` to control the linter for JSON (and its super languages) files. Contributed by [@​ematipico](https://togithub.com/ematipico) - Add option `css.linter.enabled` to control the linter for CSS (and its super languages) files. Contributed by [@​ematipico](https://togithub.com/ematipico) - Add option `css.formatter`, to control the formatter options for CSS (and its super languages) files. Contributed by [@​ematipico](https://togithub.com/ematipico) - You can now change the severity of lint rules down to `"info"`. The `"info"` severity doesn't emit error codes, and it isn't affected by other options like `--error-on-warnings`: ```json { "linter": { "rules": { "suspicious": { "noDebugger": "info" } } } } ``` Contributed by [@​ematipico](https://togithub.com/ematipico) ##### Enhancements - The `javascript.formatter.trailingComma` option is deprecated and renamed to `javascript.formatter.trailingCommas`. The corresponding CLI option `--trailing-comma` is also deprecated and renamed to `--trailing-commas`. Details can be checked in [#​2492](https://togithub.com/biomejs/biome/pull/2492). Contributed by [@​Sec-ant](https://togithub.com/Sec-ant) ##### Bug fixes - Fix a bug where if the formatter was disabled at the language level, it could be erroneously enabled by an override that did not specify the formatter section [#​2924](https://togithub.com/biomejs/biome/issues/2924). Contributed by [@​dyc3](https://togithub.com/dyc3) - Fix [#​2990](https://togithub.com/biomejs/biome/issues/2990), now Biome doesn't add a trailing comma when formatting `biome.json`. Contributed by [@​dyc3](https://togithub.com/dyc3) ##### Editors ##### New features - Add support for LSP Workspaces ##### Enhancements - The LSP doesn't crash anymore when the configuration file contains errors. If the configuration contains errors, Biome now shows a pop-up to the user, and it will only parse files using the default configuration. Formatting and linting is disabled until the configuration file is fixed. Contributed by [@​ematipico](https://togithub.com/ematipico) ##### Bug fixes - Fixes [#​2781](https://togithub.com/biomejs/biome/issues/2781), by correctly computing the configuration to apply to a specific file. Contributed by [@​ematipico](https://togithub.com/ematipico) ##### Formatter ##### Bug fixes - Fix [#​2470](https://togithub.com/biomejs/biome/issues/2470) by avoid introducing linebreaks in single line string interpolations. Contributed by [@​ah-yu](https://togithub.com/ah-yu) - Resolve deadlocks by narrowing the scope of locks. Contributed by [@​mechairoi](https://togithub.com/mechairoi) - Fix [#​2782](https://togithub.com/biomejs/biome/issues/2782) by computing the enabled rules by taking the override settings into consideration. Contributed by [@​ematipico](https://togithub.com/ematipico) - Fix \[https://github.com/biomejs/biome/issues/2877](https://togithub.com/biomejs/biome/issues/2877)7] by correctly handling line terminators in JSX string. Contributed by [@​ah-yu](https://togithub.com/ah-yu) ##### Linter ##### Promoted rules New rules are incubated in the nursery group. Once stable, we promote them to a stable group. The following rules are promoted: - [useImportRestrictions](https://biomejs.dev/linter/rules/use-import-restrictions/) - [noNodejsModules](https://biomejs.dev/linter/rules/no-nodejs-modules/) - [useArrayLiterals](https://biomejs.dev/linter/rules/use-array-literals/) - [noConstantMathMinMaxClamp](https://biomejs.dev/linter/rules/no-constant-math-min-max-clamp/) - [noFlatMapIdentity](https://biomejs.dev/linter/rules/no-flat-map-identity/) ##### New features - Add [nursery/useDateNow](https://biomejs.dev/linter/rules/use-date-now/). Contributed by [@​minht11](https://togithub.com/minht11) - Add [nursery/useErrorMessage](https://biomejs.dev/linter/rules/use_error_message/). Contributed by [@​minht11](https://togithub.com/minht11) - Add [nursery/useThrowOnlyError](https://biomejs.dev/linter/rules/use_throw_only_error/). Contributed by [@​minht11](https://togithub.com/minht11) - Add [nursery/useImportExtensions](https://biomejs.dev/linter/rules/use-import-extensions/). Contributed by [@​minht11](https://togithub.com/minht11) - [useNamingConvention](https://biomejs.dev/linter/rules/use-naming-convention/) now supports an option to enforce custom conventions ([#​1900](https://togithub.com/biomejs/biome/issues/1900)). For example, you can enforce the use of a prefix for private class members: ```json { "linter": { "rules": { "style": { "useNamingConvention": { "level": "error", "options": { "conventions": [ { "selector": { "kind": "classMember", "modifiers": ["private"] }, "match": "_(.*)", "formats": ["camelCase"] } ] } } } } } } ``` Please, find more details in the [rule documentation](https://biomejs.dev/linter/rules/use-naming-convention/#options). Contributed by [@​Conaclos](https://togithub.com/Conaclos) - Add [nursery/useNumberToFixedDigitsArgument](https://biomejs.dev/linter/rules/use-number-to-fixed-digits-argument/). Contributed by [@​minht11](https://togithub.com/minht11) - Add [nursery/useThrowNewError](https://biomejs.dev/linter/rules/use-throw-new-error/). Contributed by [@​minht11](https://togithub.com/minht11) - Add [nursery/useTopLevelRegex](https://biomejs.dev/linter/rules/use-top-level-regex), which enforces defining regular expressions at the top level of a module. [#​2148](https://togithub.com/biomejs/biome/issues/2148) Contributed by [@​dyc3](https://togithub.com/dyc3). - Add [nursery/noCssEmptyBlock](https://biomejs.dev/linter/rules/no-css-empty-block). [#​2513](https://togithub.com/biomejs/biome/pull/2513) Contributed by [@​togami2864](https://togithub.com/togami2864) - Add [nursery/noDuplicateAtImportRules](https://biomejs.dev/linter/rules/no-duplicate-at-import-rules). [#​2658](https://togithub.com/biomejs/biome/pull/2658) Contributed by [@​DerTimonius](https://togithub.com/DerTimonius) - Add [nursery/noDuplicateFontNames](https://biomejs.dev/linter/rules/no-duplicate-font-names). [#​2308](https://togithub.com/biomejs/biome/pull/2308) Contributed by [@​togami2864](https://togithub.com/togami2864) - Add [nursery/noDuplicateSelectorsKeyframeBlock](https://biomejs.dev/linter/rules/no-duplicate-selectors-keyframe-block). [#​2534](https://togithub.com/biomejs/biome/pull/2534) Contributed by [@​isnakode](https://togithub.com/isnakode) - Add [nursery/noImportantInKeyframe](https://biomejs.dev/linter/rules/no-important-in-keyframe). [#​2542](https://togithub.com/biomejs/biome/pull/2542) Contributed by [@​isnakode](https://togithub.com/isnakode) - Add [nursery/noInvalidPositionAtImportRule](https://biomejs.dev/linter/rules/no-invalid-position-at-import-rule). [#​2717](https://togithub.com/biomejs/biome/issues/2717) Contributed by [@​t-shiratori](https://togithub.com/t-shiratori) - Add [nursery/noUnknownFunction](https://biomejs.dev/linter/rules/no-unknown-function). [#​2570](https://togithub.com/biomejs/biome/pull/2570) Contributed by [@​neokidev](https://togithub.com/neokidev) - Add [nursery/noUnknownMediaFeatureName](https://biomejs.dev/linter/rules/no-unknown-media-feature-name). [#​2751](https://togithub.com/biomejs/biome/issues/2751) Contributed by [@​Kazuhiro-Mimaki](https://togithub.com/Kazuhiro-Mimaki) - Add [nursery/noUnknownProperty](https://biomejs.dev/linter/rules/no-unknown-property). [#​2755](https://togithub.com/biomejs/biome/pull/2755) Contributed by [@​chansuke](https://togithub.com/chansuke) - Add [nursery/noUnknownSelectorPseudoElement](https://biomejs.dev/linter/rules/no-unknown-selector-pseudo-element). [#​2655](https://togithub.com/biomejs/biome/issues/2655) Contributed by [@​keita-hino](https://togithub.com/keita-hino) - Add [nursery/noUnknownUnit](https://biomejs.dev/linter/rules/no-unknwon-unit). [#​2535](https://togithub.com/biomejs/biome/issues/2535) Contributed by [@​neokidev](https://togithub.com/neokidev) - Add [nursery/noUnmatchableAnbSelector](https://biomejs.dev/linter/rules/no-unmatchable-anb-selector). [#​2706](https://togithub.com/biomejs/biome/issues/2706) Contributed by [@​togami2864](https://togithub.com/togami2864) - Add [nursery/useGenericFontNames](https://biomejs.dev/linter/rules/use-generic-font-names). [#​2573](https://togithub.com/biomejs/biome/pull/2573) Contributed by [@​togami2864](https://togithub.com/togami2864) - Add [nursery/noYodaExpression](https://biomejs.dev/linter/rules/no-yoda-expression/). Contributed by [@​michellocana](https://togithub.com/michellocana) - Add [nursery/noUnusedFunctionParameters](https://biomejs.dev/linter/rules/no-unused-function-parameters/) Contributed by [@​printfn](https://togithub.com/printfn) ##### Enhancements - Add a code action for [noConfusingVoidType](https://biomejs.dev/linter/rules/no-confusing-void-type/) and improve the diagnostics. The rule now suggests using `undefined` instead of `void` in confusing places. The diagnosis is also clearer. Contributed by [@​Conaclos](https://togithub.com/Conaclos) - Improve code action for [nursery/noUselessUndefinedInitialization](https://biomejs.dev/linter/rules/no-useless-undefined-initialization/) to handle comments. The rule now places inline comments after the declaration statement, instead of removing them. The code action is now safe to apply. Contributed by [@​lutaok](https://togithub.com/lutaok) - Make [useExhaustiveDependencies](https://biomejs.dev/linter/rules/use-exhaustive-dependencies/) report duplicate dependencies. Contributed by [@​tunamaguro](https://togithub.com/tunamaguro) - Rename `noEvolvingAny` into `noEvolvingTypes` ([#​48](https://togithub.com/biomejs/website/issues/48)). Contributed by [@​Conaclos](https://togithub.com/Conaclos) ##### Bug fixes - [noUndeclaredVariables](https://biomejs.dev/linter/rules/no-undeclared-variables/) and [noUnusedImports](https://biomejs.dev/linter/rules/no-unused-imports) now correctly handle import namespaces ([#​2796](https://togithub.com/biomejs/biome/issues/2796)). Previously, Biome bound unqualified type to import namespaces. Import namespaces can only be used as qualified names in a type (ambient) context. ```ts // Unused import import * as Ns1 from ""; // This doesn't reference the import namespace `Ns1` type T1 = Ns1; // Undeclared variable `Ns1` // Unused import import type * as Ns2 from ""; // This doesn't reference the import namespace `Ns2` type T2 = Ns2; // Undeclared variable `Ns2` import type * as Ns3 from ""; // This references the import namespace because it is a qualified name. type T3 = Ns3.Inner; // This also references the import namespace. export type { Ns3 } ``` Contributed by [@​Conaclos](https://togithub.com/Conaclos) - [noUndeclaredVariables](https://biomejs.dev/linter/rules/no-undeclared-variables/) now correctly handle ambient computed member names ([#​2975](https://togithub.com/biomejs/biome/issues/2975)). A constant can be imported as a type and used in a computed member name of a member signature. Previously, Biome was unable to bind the value imported as a type to the computed member name. ```ts import type { NAME } from "./constants.js"; type X = { [NAME]: number }; ``` Contributed by [@​Conaclos](https://togithub.com/Conaclos) - [noUndeclaredVariables](https://biomejs.dev/linter/rules/no-undeclared-variables/) now ignores `this` in JSX components ([#​2636](https://togithub.com/biomejs/biome/issues/2636)). The rule no longer reports `this` as undeclared in following code. ```jsx import { Component } from 'react'; export class MyComponent extends Component { render() { return } } ``` Contributed by [@​printfn](https://togithub.com/printfn) and [@​Conaclos](https://togithub.com/Conaclos) - `useJsxKeyInIterable` now handles more cases involving fragments. See the snippets below. Contributed by [@​dyc3](https://togithub.com/dyc3) ```jsx // valid [].map((item) => { return <>{item.condition ?
:
foo
}; }); // invalid [].map((item) => { return <>{item.condition ?
:
foo
}; }); ``` - `noExcessiveNestedTestSuites` no longer erroneously alerts on `describe` calls that are not invoking the global `describe` function. [#​2599](https://togithub.com/biomejs/biome/issues/2599) Contributed by [@​dyc3](https://togithub.com/dyc3) ```js // now valid z.object({}) .describe('') .describe('') .describe('') .describe('') .describe('') .describe(''); ``` - `noEmptyBlockStatements` no longer reports empty constructors using typescript parameter properties. [#​3005](https://togithub.com/biomejs/biome/issues/3005) Contributed by [@​dyc3](https://togithub.com/dyc3) - `noEmptyBlockStatements` no longer reports empty private or protected constructors. Contributed by [@​dyc3](https://togithub.com/dyc3) - [noExportsInTest](https://biomejs.dev/linter/rules/no-exports-in-test/) rule no longer treats files with in-source testing as test files [https://github.com/biomejs/biome/issues/2859](https://togithub.com/biomejs/biome/issues/2859). Contributed by [@​ah-yu](https://togithub.com/ah-yu) - [useSortedClasses](https://biomejs.dev/linter/rules/use-sorted-classes/) now keeps leading and trailing spaces when applying the code action inside template literals: i Unsafe fix: Sort the classes. 1 1 │ <> 2 │ - → 2 │ + → 3 3 │
4 4 │ - [noUndeclaredDependencies](https://biomejs.dev/linter/rules/no-undeclared-dependencies/) is correctly triggered when running `biome ci`. Contributed by [@​ematipico](https://togithub.com/ematipico) - [noUnusedVariables](https://biomejs.dev/linter/rules/no-unused-variables/) no longer panics when a certain combination of characters is typed. Contributed by [@​ematipico](https://togithub.com/ematipico) - [noUndeclaredVariables](https://biomejs.dev/linter/rules/no-undeclared-variables/) no logger alerts on `arguments` object in a function scope. Contributed by [@​ah-yu](https://togithub.com/ah-yu) ##### Parser ##### Enhancements - `lang="tsx"` is now supported in Vue Single File Components. [#​2765](https://togithub.com/biomejs/biome/issues/2765) Contributed by [@​dyc3](https://togithub.com/dyc3) ##### Bug fixes - The `const` modifier for type parameters is now accepted for TypeScript `new` signatures ([#​2825](https://togithub.com/biomejs/biome/issues/2825)). The following code is now correctly parsed: ```ts interface I { new(x: T): T } ``` Contributed by [@​Conaclos](https://togithub.com/Conaclos) - Some invalid TypeScript syntax caused the Biome parser to crash. The following invalid syntax no longer causes the Biome parser to crash: ```ts declare using x: null; declare qwait using x: null; ``` Contributed by [@​Conaclos](https://togithub.com/Conaclos)
devcontainers/cli (@​devcontainers/cli) ### [`v0.64.0`](https://togithub.com/devcontainers/cli/blob/HEAD/CHANGELOG.md#0640) [Compare Source](https://togithub.com/devcontainers/cli/compare/v0.63.0...v0.64.0) - Fix project name with env variable. ([https://github.com/devcontainers/cli/issues/839](https://togithub.com/devcontainers/cli/issues/839)) ### [`v0.63.0`](https://togithub.com/devcontainers/cli/blob/HEAD/CHANGELOG.md#0630) [Compare Source](https://togithub.com/devcontainers/cli/compare/v0.62.0...v0.63.0) - Surface additional information in `devcontainer up`. ([https://github.com/devcontainers/cli/pull/836](https://togithub.com/devcontainers/cli/pull/836)) - Changes the config layer of the Feature manifest to a empty descriptor ([https://github.com/devcontainers/cli/pull/815](https://togithub.com/devcontainers/cli/pull/815))
actions/checkout (actions/checkout) ### [`v4.1.7`](https://togithub.com/actions/checkout/blob/HEAD/CHANGELOG.md#v417) [Compare Source](https://togithub.com/actions/checkout/compare/v4.1.6...v4.1.7) - Bump the minor-npm-dependencies group across 1 directory with 4 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1739](https://togithub.com/actions/checkout/pull/1739) - Bump actions/checkout from 3 to 4 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/actions/checkout/pull/1697](https://togithub.com/actions/checkout/pull/1697) - Check out other refs/\* by commit by [@​orhantoy](https://togithub.com/orhantoy) in [https://github.com/actions/checkout/pull/1774](https://togithub.com/actions/checkout/pull/1774) - Pin actions/checkout's own workflows to a known, good, stable version. by [@​jww3](https://togithub.com/jww3) in [https://github.com/actions/checkout/pull/1776](https://togithub.com/actions/checkout/pull/1776)
streetsidesoftware/cspell (cspell) ### [`v8.8.4`](https://togithub.com/streetsidesoftware/cspell/blob/HEAD/packages/cspell/CHANGELOG.md#small884-2024-06-03-small) [Compare Source](https://togithub.com/streetsidesoftware/cspell/compare/v8.8.3...v8.8.4) - ci: Fix Lint -- Workflow Bot ([#​5699](https://togithub.com/streetsidesoftware/cspell/issues/5699)) ([211113a](https://togithub.com/streetsidesoftware/cspell/commit/211113a)), closes [#​5699](https://togithub.com/streetsidesoftware/cspell/issues/5699)
cssnano/cssnano (cssnano) ### [`v7.0.2`](https://togithub.com/cssnano/cssnano/releases/tag/cssnano%407.0.2): v7.0.2 [Compare Source](https://togithub.com/cssnano/cssnano/compare/cssnano@7.0.1...cssnano@7.0.2) ##### Bug Fixes - fix invalid output in some cases where selectors contain comments
dprint/dprint (dprint) ### [`v0.46.2`](https://togithub.com/dprint/dprint/releases/tag/0.46.2) [Compare Source](https://togithub.com/dprint/dprint/compare/0.46.1...0.46.2) #### Changes - fix: analyze Wasm plugin version without instantiating plugin ([#​857](https://togithub.com/dprint/dprint/issues/857)) #### Install Run `dprint upgrade` or see https://dprint.dev/install/ #### Checksums |Artifact|SHA-256 Checksum| |:--|:--| |dprint-x86\_64-apple-darwin.zip|88abd8a6f416b624fdfae338ae6fca440f4a36b35199f0d03438caeb7715d820| |dprint-aarch64-apple-darwin.zip|a331d1c9ad2abb96d46c33d25f1166bd5497dde0c48eb8a8f3d98143cd4bca5b| |dprint-x86\_64-pc-windows-msvc.zip|53ab1991d23be9de8bf3b920f8605aee55629321fcacccfc5df38d49b2eb5160| |dprint-x86\_64-pc-windows-msvc-installer.exe|e4c015ddbc247fe889f03a011ec4832bc339175977f7db4f674ae0313e2fe726| |dprint-x86\_64-unknown-linux-gnu.zip|e2819a2f1092750227cbd0a92b1172e889a30ddbb5773e85db133c1c8859edf6| |dprint-x86\_64-unknown-linux-musl.zip|bbe9fe8eae9abdcfccdeca97fd8c524efd6137de702ee96e82b0ecb4ad432ebf| |dprint-aarch64-unknown-linux-gnu.zip|3f01bc1d7d47fec7c00af52ee5e270f4759743da1f6e1b31a593bfdaa1dc1906| |dprint-aarch64-unknown-linux-musl.zip|d7b6f88c320bffcbb1dfeb6030d5a1ef23d18d81721e39abdbf4b8bdab389ba4|
editorconfig-checker/editorconfig-checker.javascript (editorconfig-checker) ### [`v5.1.8`](https://togithub.com/editorconfig-checker/editorconfig-checker.javascript/releases/tag/v5.1.8) [Compare Source](https://togithub.com/editorconfig-checker/editorconfig-checker.javascript/compare/v5.1.7...v5.1.8) ##### Reverts - Revert "chore(deps-dev): bump undici from 6.6.2 to 6.11.1 ([#​411](https://togithub.com/editorconfig-checker/editorconfig-checker.javascript/issues/411))" ([51a754a](https://togithub.com/editorconfig-checker/editorconfig-checker.javascript/commit/51a754ae8f5b77022dc315060aaa0512a0866e77)), closes [#​411](https://togithub.com/editorconfig-checker/editorconfig-checker.javascript/issues/411) v5.1.6 release didn't work because of an issue with the `@vercel/ncc` compiler: [https://github.com/vercel/ncc/issues/1193](https://togithub.com/vercel/ncc/issues/1193), for now we revert the changes, so basically v5.1.8 is the same as v5.1.5. Sorry for the troubles, we also improved our CI, so we should be able to detect this kind of issues in the future. ### [`v5.1.7`](https://togithub.com/editorconfig-checker/editorconfig-checker.javascript/releases/tag/v5.1.7) [Compare Source](https://togithub.com/editorconfig-checker/editorconfig-checker.javascript/compare/v5.1.6...v5.1.7) ##### Reverts - Revert "fix: update dependencies to latest ([#​412](https://togithub.com/editorconfig-checker/editorconfig-checker.javascript/issues/412))" ([f04e860](https://togithub.com/editorconfig-checker/editorconfig-checker.javascript/commit/f04e860f2416ac52602560bff310a1d7e115aaa3)), closes [#​412](https://togithub.com/editorconfig-checker/editorconfig-checker.javascript/issues/412) [#​413](https://togithub.com/editorconfig-checker/editorconfig-checker.javascript/issues/413) - Revert "fix: semantic-release v23" ([d1b7b93](https://togithub.com/editorconfig-checker/editorconfig-checker.javascript/commit/d1b7b93d417c518693cb082618869e01f73855c8)) ### [`v5.1.6`](https://togithub.com/editorconfig-checker/editorconfig-checker.javascript/releases/tag/v5.1.6) [Compare Source](https://togithub.com/editorconfig-checker/editorconfig-checker.javascript/compare/v5.1.5...v5.1.6) ##### Bug Fixes - semantic-release v23 ([52f4b29](https://togithub.com/editorconfig-checker/editorconfig-checker.javascript/commit/52f4b29bbcb60efd137552d7c2f5cfc284c9780f)) - update dependencies to latest ([#​412](https://togithub.com/editorconfig-checker/editorconfig-checker.javascript/issues/412)) ([5b68e04](https://togithub.com/editorconfig-checker/editorconfig-checker.javascript/commit/5b68e047541e0205c41fa613ef82152b5ab1a700))
github/codeql-action (github/codeql-action) ### [`v3.25.10`](https://togithub.com/github/codeql-action/compare/v3.25.9...v3.25.10) [Compare Source](https://togithub.com/github/codeql-action/compare/v3.25.9...v3.25.10) ### [`v3.25.9`](https://togithub.com/github/codeql-action/compare/v3.25.8...v3.25.9) [Compare Source](https://togithub.com/github/codeql-action/compare/v3.25.8...v3.25.9) ### [`v3.25.8`](https://togithub.com/github/codeql-action/compare/v3.25.7...v3.25.8) [Compare Source](https://togithub.com/github/codeql-action/compare/v3.25.7...v3.25.8)
pnpm/pnpm (pnpm) ### [`v9.3.0`](https://togithub.com/pnpm/pnpm/releases/tag/v9.3.0) [Compare Source](https://togithub.com/pnpm/pnpm/compare/v9.2.0...v9.3.0) #### Minor Changes - **Semi-breaking.** Dependency key names in the lockfile are shortened if they are longer than 1000 characters. We don't expect this change to affect many users. Affected users most probably can't run install successfully at the moment. This change is required to fix some edge cases in which installation fails with an out-of-memory error or "Invalid string length (RangeError: Invalid string length)" error. The max allowed length of the dependency key can be controlled with the `peers-suffix-max-length` setting [#​8177](https://togithub.com/pnpm/pnpm/pull/8177). #### Patch Changes - Set `reporter-hide-prefix` to `true` by default for `pnpm exec`. In order to show prefix, the user now has to explicitly set `reporter-hide-prefix=false` [#​8174](https://togithub.com/pnpm/pnpm/issues/8174). #### Platinum Sponsors
#### Gold Sponsors
#### Our Silver Sponsors
### [`v9.2.0`](https://togithub.com/pnpm/pnpm/releases/tag/v9.2.0) [

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

This PR has been generated by Mend Renovate. View repository job log here.

socket-security[bot] commented 2 months ago

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package New capabilities Transitives Size Publisher
npm/cspell@8.8.4 environment, network Transitive: filesystem, unsafe +61 5.35 MB jason-dent
npm/cssnano@7.0.2 Transitive: environment, filesystem, network, shell, unsafe +63 10.3 MB ludovicofischer
npm/dprint@0.46.2 environment, filesystem, shell 0 8.03 kB dsherret
npm/editorconfig-checker@5.1.8 None 0 719 kB theoludwig
npm/prettier@3.3.2 environment, filesystem, unsafe 0 8.25 MB prettier-bot

🚮 Removed packages: npm/cspell@8.8.3, npm/cssnano@7.0.1, npm/dprint@0.46.1, npm/editorconfig-checker@5.1.5, npm/prettier@3.3.0

View full report↗︎

socket-security[bot] commented 2 months ago

👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring: npm/@biomejs/biome@1.8.1

View full report↗︎

Next steps

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/foo@1.0.0 or ignore all packages with @SocketSecurity ignore-all

DerekNonGeneric commented 2 months ago

@SocketSecurity ignore npm/@biomejs/biome@1.8.1 npm/@biomejs/biome@1.7.3 npm/dprint@0.46.1