build(deps): bump the minor-and-patch group with 5 updates by dependabot[bot] · Pull Request #547 · KERNlang/kern

dependabot · 2026-07-26T06:14:10Z

Bumps the minor-and-patch group with 5 updates:

Package	From	To
@biomejs/biome	`2.5.4`	`2.5.5`
monaco-editor	`0.55.1`	`0.56.0`
next	`16.2.10`	`16.2.12`
react	`19.2.7`	`19.2.8`
react-dom	`19.2.7`	`19.2.8`

Updates @biomejs/biome from 2.5.4 to 2.5.5

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.5.5

2.5.5

Patch Changes
#10972 ab8c21b Thanks @ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:
declare const value: 1n | 2n;
switch (value) {
  case 1n:
    break;
}
#10972 ab8c21b Thanks @ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:
type Recursive = Recursive;
declare const value: Recursive;
String(value);
value || "fallback";
#10977 0bf7486 Thanks @ematipico! - Fixed #10922: the action useSortedAttributes no longer triggers for HTML instructions.

#10957 cf263c4 Thanks @dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

#10983 edc0ed7 Thanks @ayaangazali! - Fixed #10980: useAriaPropsSupportedByRole no longer reports false positives when the attribute that determines an element's implicit ARIA role is written as a shorthand attribute, such as <a {href} aria-label="..."> in Astro and Svelte files.

Shorthand attributes are now taken into account when computing the implicit role, so the anchor above correctly resolves to the link role instead of generic.
#10889 89526e3 Thanks @denbezrukov! - Fixed CSS formatter casing for syntax-owned names while preserving author-defined names, including scoped keyframes and container scroll-state queries.
- A:HOVER { COLOR: INITIAL; }
+ A:hover { color: initial; }
- @KEYFRAMES :GLOBAL KeepFrames { FROM { COLOR: RED; } }
+ @keyframes :GLOBAL KeepFrames { from { color: RED; } }
- @CONTAINER scroll-state((SCROLLED: TOP) AND (STUCK)) { A:HOVER { COLOR: RED; } }
+ @container scroll-state((SCROLLED: TOP) AND (STUCK)) { A:hover { color: RED; } }
#10964 794ccd0 Thanks @denbezrukov! - Fixed CSS formatting for comments between declaration values and !important.
-a { color: /* before */ /* after */ red !important; }
+a { color: /* before */ red /* after */ !important; }

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.5.5

Patch Changes
#10972 ab8c21b Thanks @ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:
declare const value: 1n | 2n;
switch (value) {
  case 1n:
    break;
}
#10972 ab8c21b Thanks @ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:
type Recursive = Recursive;
declare const value: Recursive;
String(value);
value || "fallback";
#10977 0bf7486 Thanks @ematipico! - Fixed #10922: the action useSortedAttributes no longer triggers for HTML instructions.

#10957 cf263c4 Thanks @dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

#10983 edc0ed7 Thanks @ayaangazali! - Fixed #10980: useAriaPropsSupportedByRole no longer reports false positives when the attribute that determines an element's implicit ARIA role is written as a shorthand attribute, such as <a {href} aria-label="..."> in Astro and Svelte files.

Shorthand attributes are now taken into account when computing the implicit role, so the anchor above correctly resolves to the link role instead of generic.
#10889 89526e3 Thanks @denbezrukov! - Fixed CSS formatter casing for syntax-owned names while preserving author-defined names, including scoped keyframes and container scroll-state queries.
- A:HOVER { COLOR: INITIAL; }
+ A:hover { color: initial; }
- @KEYFRAMES :GLOBAL KeepFrames { FROM { COLOR: RED; } }
+ @keyframes :GLOBAL KeepFrames { from { color: RED; } }
- @CONTAINER scroll-state((SCROLLED: TOP) AND (STUCK)) { A:HOVER { COLOR: RED; } }
+ @container scroll-state((SCROLLED: TOP) AND (STUCK)) { A:hover { color: RED; } }
#10964 794ccd0 Thanks @denbezrukov! - Fixed CSS formatting for comments between declaration values and !important.
-a { color: /* before */ /* after */ red !important; }
+a { color: /* before */ red /* after */ !important; }

... (truncated)

Commits

412a0e9 ci: release (#10948)
b3b12b3 feat(lint): add noNegationInEqualityCheck rule (#10915)
9a66bc7 chore: add latitude to sponsors (#10947)
See full diff in compare view

Updates monaco-editor from 0.55.1 to 0.56.0

Release notes

Sourced from monaco-editor's releases.

v0.56.0

Changes:

#5392: Bump websocket-driver from 0.7.4 to 0.7.5 in /website

#5396: Release Monaco Editor 0.56.0

#5385: Bump websocket-driver from 0.7.4 to 0.7.5 in /samples

#5379: Removes leftover debugger statements.

#5376: fixes pipeline

#5374: Bump webpack-dev-server from 5.2.4 to 5.2.5 in /samples

#5373: Bump webpack-dev-server from 5.2.4 to 5.2.5 in /website

#5371: Bump undici from 7.24.7 to 7.28.0

#5372: Fixes CI

#5363: Bump launch-editor from 2.10.0 to 2.14.1 in /samples

#5362: Bump @babel/core from 7.17.8 to 7.29.6 in /samples/browser-esm-webpack-typescript-react

#5361: Bump js-yaml from 4.1.1 to 4.2.0

#5360: Bump vite from 7.3.2 to 7.3.5

#5358: Bump shell-quote from 1.8.3 to 1.8.4 in /samples

#5359: Bump ws from 8.20.1 to 8.21.0 in /monaco-lsp-client

#5357: Bump esbuild and vite in /samples/browser-esm-vite-react

#5354: Bump shell-quote from 1.8.3 to 1.8.4 in /website

#5333: Bump dompurify from 3.2.7 to 3.4.5

#5347: Revert "Bump dompurify from 3.2.7 to 3.4.5"

#5337: Bump qs from 6.14.2 to 6.15.2

#5338: Bump qs and express in /samples

#5336: Bump qs and express in /website

#5335: Bump webpack-dev-server from 5.2.1 to 5.2.4 in /website

#5331: Bump ws from 8.18.3 to 8.20.1 in /monaco-lsp-client

#5330: Bump webpack-dev-server from 5.2.1 to 5.2.4 in /samples

#5326: Run npm audit fix and update lockfile

#5323: Bump postcss from 8.5.6 to 8.5.14 in /samples/browser-esm-vite-react

#5322: Bump postcss from 8.5.6 to 8.5.14 in /website

#5320: Bump @babel/plugin-transform-modules-systemjs from 7.17.8 to 7.29.4 in /samples/browser-esm-webpack-typescript-react

#5317: Bump fast-uri from 3.1.0 to 3.1.2 in /webpack-plugin

#5315: Bump fast-uri from 3.0.6 to 3.1.2 in /samples

#5316: Bump fast-uri from 3.1.0 to 3.1.2

#5318: Bump fast-uri from 3.1.0 to 3.1.2 in /website

#5319: Bump fast-uri from 3.1.0 to 3.1.2 in /samples/browser-esm-webpack-typescript-react

#5313: Bump postcss from 8.4.31 to 8.5.13 in /samples

#5308: Bump postcss from 8.5.6 to 8.5.12

#5306: Bump postcss from 8.4.31 to 8.5.10 in /webpack-plugin

#5301: Bump follow-redirects from 1.15.9 to 1.16.0 in /samples

#5300: Bump follow-redirects from 1.15.11 to 1.16.0 in /website

#5299: Bump follow-redirects from 1.15.6 to 1.16.0

#5295: Bump vite from 5.4.21 to 6.4.2 in /samples/browser-esm-vite-react

#5293: Bump lodash from 4.17.23 to 4.18.1 in /website

#5292: Bump lodash from 4.17.23 to 4.18.1 in /samples

... (truncated)

Changelog

Sourced from monaco-editor's changelog.

[0.56.0]

Breaking Changes

Reorganizes the exported ESM modules to provide supported, tree-shakeable entry points (#5155). The monaco-editor entry point continues to load all features and languages. Custom bundles can now import monaco-editor/editor and opt into:

all editor features with monaco-editor/features/register.all, or individual features with monaco-editor/features/<feature>/register;

all language definitions with monaco-editor/languages/definitions/register.all, or individual definitions with monaco-editor/languages/definitions/<language>/register;

the CSS, HTML, JSON, and TypeScript language features with monaco-editor/languages/features/register.all, or their individual register entry points.

Renames the misspelled IOverlayWidgetPosition.stackOridinal property to stackOrdinal.

Removes the deprecated IMirrorModel and IWorkerContext worker API types.

New Features and APIs

Adds editor.doubleClickSelectsBlock.

Adds editor.find.closeOnResult and editor.inlayHints.showLongLineWarning.

Adds offWhenInlineCompletions to QuickSuggestionsValue.

Adds model and provider option support to inline completion providers.

Adds ICodeEditor.revealAllCursors, ICodeEditor.getWidthOfLine, and ICodeEditor.renderAsync.

Adds advanced-external and advanced-wasm diff algorithms.

Exposes typed native LSP client and transport APIs.

Fixes

Treats Markdown returned by language servers as untrusted (#5280).

Updates the editor core to the version used by 0.56.0-dev-20260625.

Commits

13f0c87 Bump websocket-driver from 0.7.4 to 0.7.5 in /website (#5392)
b5f23a3 Merge pull request #5396 from microsoft/hediet/b/release-0.56.0
9d053ab Improve Monaco Editor 0.56.0 changelog
0ba33d0 Release Monaco Editor 0.56.0
6d961b1 Bump websocket-driver from 0.7.4 to 0.7.5 in /samples (#5385)
d8c9ff0 Removes leftover debugger statements. (#5379)
59285ab fixes pipeline (#5376)
aaf58db Bump webpack-dev-server from 5.2.4 to 5.2.5 in /samples (#5374)
d8ac38e Bump webpack-dev-server from 5.2.4 to 5.2.5 in /website (#5373)
874af57 Bump undici from 7.24.7 to 7.28.0 (#5371)
Additional commits viewable in compare view

Updates next from 16.2.10 to 16.2.12

Release notes

Sourced from next's releases.

v16.2.12

What's Changed

Backport/docs fixes 16.2 - July round by @icyJoseph in vercel/next.js#96031

[Backport] Fixes to support TypeScript 7 by @lukesandberg in vercel/next.js#95831

Full Changelog: vercel/next.js@v16.2.11...v16.2.12

v16.2.11

This release contains security fixes for the following advisories:

High:

Denial of Service in App Router using Server Actions

Middleware / Proxy bypass in App Router applications using Turbopack and single locale

Server-Side Request Forgery in rewrites via attacker-controlled destination hostname

Server-Side Request Forgery in Server Actions on custom servers

Moderate:

Cache confusion of response bodies for requests with bodies

Cache confusion of response bodies for requests with bodies containing invalid UTF-8 byte sequences

Denial of Service in the Image Optimization API using SVGs

Unauthenticated disclosure of internal Server Function endpoints

Unbounded Server Action payload in Edge runtime

Commits

2234717 v16.2.12
957f5ed [Backport] Fixes to support TypeScript 7 (#95831)
b56eb16 Backport/docs fixes 16.2 - July round (#96031)
9beca08 v16.2.11
3c48c7a [16.x] Fix Turbopack middleware matcher with i18n single locale
ac1eff3 [16.x] Improve performance of checking valid MPA form submissions
9a4651e [16.x] Enforce serverActions.bodySizeLimit for Server Actions in Edge runtime
b512063 [16.x] Set correct origin for internal redirects in custom server
d303326 [16.x] Ensure exotic rewrite param values are properly encoded
73b9487 [16.x] fix(fetch-cache): key fetch(Request, init) by the effective request
Additional commits viewable in compare view

Updates react from 19.2.7 to 19.2.8

Release notes

Sourced from react's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

Updates react-dom from 19.2.7 to 19.2.8

Release notes

Sourced from react-dom's releases.

19.2.8 (July 21st, 2026)

React Server Components

Performance improvements when decoding (#37087 by @eps1lon)

Commits

1dd4ecb [FlightReply] Performance improvements when decoding (#37087)
b0d2fdb [19.2.x] Update required references to GitHub repo (#36753)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 5 updates: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.4` | `2.5.5` | | [monaco-editor](https://github.com/microsoft/monaco-editor) | `0.55.1` | `0.56.0` | | [next](https://github.com/vercel/next.js) | `16.2.10` | `16.2.12` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.7` | `19.2.8` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.7` | `19.2.8` | Updates `@biomejs/biome` from 2.5.4 to 2.5.5 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.5/packages/@biomejs/biome) Updates `monaco-editor` from 0.55.1 to 0.56.0 - [Release notes](https://github.com/microsoft/monaco-editor/releases) - [Changelog](https://github.com/microsoft/monaco-editor/blob/main/CHANGELOG.md) - [Commits](microsoft/monaco-editor@v0.55.1...v0.56.0) Updates `next` from 16.2.10 to 16.2.12 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.2.10...v16.2.12) Updates `react` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react) Updates `react-dom` from 19.2.7 to 19.2.8 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.2.8/packages/react-dom) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.5.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: monaco-editor dependency-version: 0.56.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: next dependency-version: 16.2.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: react dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: react-dom dependency-version: 19.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-02T06:14:21Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 26, 2026

dependabot Bot closed this Aug 2, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/dev/minor-and-patch-c0e22b930e branch August 2, 2026 06:14

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the minor-and-patch group with 5 updates - #547

build(deps): bump the minor-and-patch group with 5 updates#547
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/npm_and_yarn/dev/minor-and-patch-c0e22b930e

dependabot Bot commented on behalf of github Jul 26, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Biome CLI v2.5.5

2.5.5

Patch Changes

2.5.5

Patch Changes

v0.56.0

Changes:

[0.56.0]

Breaking Changes

New Features and APIs

Fixes

v16.2.12

What's Changed

v16.2.11

19.2.8 (July 21st, 2026)

React Server Components

19.2.8 (July 21st, 2026)

React Server Components

Uh oh!

dependabot Bot commented on behalf of github Aug 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 26, 2026 •

edited

Loading