Skip to content

chore(deps): update all non-major dependencies - #286

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/all-minor-patch
Jul 25, 2026
Merged

chore(deps): update all non-major dependencies#286
renovate[bot] merged 1 commit into
mainfrom
renovate/all-minor-patch

Conversation

@renovate

@renovate renovate Bot commented Jul 25, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@biomejs/biome (source) ^2.5.4^2.5.5 age confidence
fumadocs-core ^16.11.5^16.12.1 age confidence
fumadocs-ui ^16.11.5^16.12.1 age confidence
lucide-react (source) ^1.25.0^1.26.0 age confidence
next (source) ^16.3.0-preview.6^16.3.0-preview.9 age confidence
postcss (source) ^8.5.19^8.5.22 age confidence
react (source) ^19.2.7^19.2.8 age confidence
react-dom (source) ^19.2.7^19.2.8 age confidence

Release Notes

biomejs/biome (@​biomejs/biome)

v2.5.5

Compare Source

Patch Changes
  • #​10972 ab8c21b Thanks @​ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:

    declare const value: 1n | 2n;
    switch (value) {
      case 1n:
        break;
    }
  • #​10972 ab8c21b Thanks @​ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:

    type Recursive = Recursive;
    declare const value: Recursive;
    
    String(value);
    value || "fallback";
  • #​10977 0bf7486 Thanks @​ematipico! - Fixed #​10922: the action useSortedAttributes no longer triggers for HTML instructions.

  • #​10957 cf263c4 Thanks @​dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

  • #​10983 edc0ed7 Thanks @​ayaangazali! - Fixed #​10980: useAriaPropsSupportedByRole no longer reports false positives when the attribute that determines an element's implicit ARIA role is written as a shorthand attribute, such as <a {href} aria-label="..."> in Astro and Svelte files.

    Shorthand attributes are now taken into account when computing the implicit role, so the anchor above correctly resolves to the link role instead of generic.

  • #​10889 89526e3 Thanks @​denbezrukov! - Fixed CSS formatter casing for syntax-owned names while preserving author-defined names, including scoped keyframes and container scroll-state queries.

    - A:HOVER { COLOR: INITIAL; }
    + A:hover { color: initial; }
    - @&#8203;KEYFRAMES :GLOBAL KeepFrames { FROM { COLOR: RED; } }
    + @&#8203;keyframes :GLOBAL KeepFrames { from { color: RED; } }
    - @&#8203;CONTAINER scroll-state((SCROLLED: TOP) AND (STUCK)) { A:HOVER { COLOR: RED; } }
    + @&#8203;container scroll-state((SCROLLED: TOP) AND (STUCK)) { A:hover { color: RED; } }
  • #​10964 794ccd0 Thanks @​denbezrukov! - Fixed CSS formatting for comments between declaration values and !important.

    -a { color: /* before */ /* after */ red !important; }
    +a { color: /* before */ red /* after */ !important; }
  • #​10993 b7a9694 Thanks @​denbezrukov! - Fixed the CSS formatter to preserve comments on the correct side of selector combinators and before declaration blocks.

    -.before > /* comment */ .after {}
    +.before /* comment */ > .after {}

    It now also keeps selectors with escaped newlines in attribute values inline when they fit.

    -div
    -  span[foo="bar\
    +div span[foo="bar\
     value"] {}
  • #​10978 8ebafe1 Thanks @​ematipico! - Fixed #​10870: noUnresolvedImports no longer reports false positives such as import type { NextRequest } from "next/server".

  • #​10901 68c10e6 Thanks @​Socialpranker! - Fixed #​10622: the HTML/Vue parser no longer panics on the argument-less v-bind shorthand (:="props").

    This syntax is valid Vue and equivalent to v-bind="props", so the parser now accepts it (along with the longhand v-bind:="props") instead of crashing while building a diagnostic for a missing argument.

  • #​10936 7df46f5 Thanks @​ematipico! - Improved generic tuple inference for useIncludes. The rule now recognizes specialised tuple element types returned through generic aliases.

  • #​10941 f787725 Thanks @​siketyan! - Fixed #10855: Biome now supports parsing and formatting CSS custom media queries declared with @custom-media.

  • #​10969 72d309b Thanks @​ematipico! - Fixed an issue where Biome logs became too verbose, dumping information not relevant to user's operations.

  • e62f6b6 Thanks @​ematipico! - Fixed #​10963: Biome no longer panics when a type-aware rule such as noFloatingPromises checks a call to a function with multiple call signatures imported from another module.

  • #​10931 899c60d Thanks @​ematipico! - Fixed check --write command. Now the command reports code frame of the formatted code, if the formatter is enabled.

  • #​10904 ceee4f4 Thanks @​qzwxsaedc! - Fixed #​10892: noUnnecessaryConditions no longer reports a false positive when checking a member of a discriminated union that is accessed through a default type-only namespace import. The following code is no longer flagged:

    import type Types from "./types";
    
    declare function parse(): Types.Result<string>;
    const result = parse();
    if (!result.success) {
    }
  • #​10962 f0a67f2 Thanks @​ematipico! - Biome no longer removes embedded styles and scripts in HTML files.

  • #​11000 5039a1e Thanks @​ematipico! - Fixed a bug where closing one editor stopped a shared Biome daemon used by other editors. LSP proxy processes now exit when either the editor or daemon disconnects.

  • #​10957 cf263c4 Thanks @​dyc3! - Improved the performance of the noThenProperty lint rule by about 50%.

  • #​10992 4bf9b21 Thanks @​ematipico! - Fixed noMisusedPromises: The rule now reports Promise-returning callbacks where a synchronous callback is expected when calls use tuple spreads or tuple rest parameters, including generic and deeply nested tuples, and when constructor signatures come from interface or object types. Recursive or excessively nested tuple spreads use a conservative fallback so analysis terminates.

    For example, the following callback is now reported.

    declare function consume(...args: [number, () => void]): void;
    const prefix: [number] = [1];
    
    consume(...prefix, async () => {});
  • #​10915 b3b12b3 Thanks @​Functionhx! - Added the rule noNegationInEqualityCheck. The rule flags negated expressions on the left side of strict equality checks like !foo === bar — due to operator precedence this evaluates as (!foo) === bar which is almost always a mistake for foo !== bar.

    The rule provides an unsafe fix that flips the operator.

    // Invalid
    !foo === bar;
    !foo !== bar;
    
    // Valid
    foo !== bar;
    foo === bar;
  • #​10970 bd1038b Thanks @​ematipico! - Improved overload selection for noMisusedPromises. Biome now handles overloaded calls, overloaded constructors, rest parameters, union arguments, and generic constraints without selecting an incompatible signature. For example, noMisusedPromises now reports the async callback passed to the synchronous overload:

    declare function consume(kind: "async", callback: () => Promise<void>): void;
    declare function consume(kind: "sync", callback: () => void): void;
    consume("sync", async () => {});
  • #​10933 48a4abb Thanks @​ematipico! - Fixed useArrayFind to recognize bigint zero indexes.

  • #​10931 899c60d Thanks @​ematipico! - Fixed an orchestration issue that could lead to deadlocks when type-aware rules are enabled.

  • #​10969 72d309b Thanks @​ematipico! - Hardened the Biome Language Server by improving its synchronisation logic.

  • #​10972 ab8c21b Thanks @​ematipico! - Fixed false positives in noMisusedPromises and useAwaitThenable when Promise or thenable inference cannot complete. These rules now suppress diagnostics instead of treating incomplete type information as a definite result. For example, useAwaitThenable no longer reports await value when the value's thenability is unknown:

    declare const value: unknown;
    
    async function consume() {
      await value;
    }
lucide-icons/lucide (lucide-react)

v1.26.0

Compare Source

vercel/next.js (next)

v16.3.0-preview.9

Compare Source

Misc Changes
  • [Bench] Add client-trace attribution pass and document metrics to render-pipeline: #​95828
  • Turbopack: Split up turbo-tasks-fs/src/lib.rs into smaller modules: #​96030
  • Turbopack: Use Arc and Box to make InvalidatorMap slightly more efficient: #​95987
  • Turbopack: Use swc_core::ecma::utils::prop_name_eq for a couple of the next-custom-transforms: #​96035
  • [Cache Components] Exclude dynamic params from prerenders when no generateStaticParams values is provided: #​95872
  • Gate partialFallback behavior behind partialPrefetching flag: #​96074
  • [turbopack] Fix deployment skew protection for component chunks: #​96079
  • Turbopack: stop copying sourcesContent into every serialized source map: #​95934
  • Upgrade React from 81e442ea-20260721 to 711c445b-20260722: #​96066
  • fix: cache miss in App Shell for cached pages with gSP: #​95665
  • skill(cc-adoption): add dev-only validation sweep reference: #​96057
  • Refine Cache Components and Partial Prefetching adoption skills: #​95817
  • [test] Move the dev-only use cache test suite to test/development: #​96023
  • Fix stale dev 'use cache' for cookieless requests and route handlers: #​96022
  • [test] Add failing tests for stale route handler and page cached data: #​96021
  • Add a dedicated HMR message for static params changes: #​96020
  • Emit the static paths HMR update after updating the cache: #​96019
  • [test] Add source-mapping coverage of React's fake stack frame scripts in use cache: #​95945
  • Fix basePath fallback parameter parsing: #​95966
  • Restore canary version 16.3.0-canary.93 after v16.3.0-preview.8 preview release
Credits

Huge thanks to @​gaearon, @​bgw, @​gnoff, @​acdlite, @​sampoder, @​vercel-release-bot, @​lubieowoce, @​aurorascharff, @​unstubbable, and @​timneutkens for helping!

v16.3.0-preview.8

Compare Source

Misc Changes
  • Always consult npm_config_user_agent first: #​95879
  • Rewrite next-cache-components-optimizer around a test-driven instant() loop: #​94721
  • docs: attribute App Shell prefetch to Partial Prefetching: #​96003
  • Turbopack: Remove chunk group id from value of chunk groups map: #​95142
  • [ci] Enforce minimumReleaseAge in e2e tests that install external dependencies: #​95628
  • Turbopack: Fix missing canonicalization of paths and always use verbatim paths internally for Windows: #​95668
  • Revert "[turbopack] Don't SSR on pages only navigated to through a soft nav (#​95539)": #​96028
  • Turbopack: Use Arc<PathBuf> for keys in turbo-task-fs's per-path MutexMap: #​95951
  • chore(deps): bump sharp@​0.35.3: #​95507
  • [turbopack] Tree-shake CJS exports that use the Object.defineProperty syntax: #​95994
  • Restore canary version 16.3.0-canary.92 after v16.3.0-preview.7 preview release
Credits

Huge thanks to @​eps1lon, @​gaojude, @​icyJoseph, @​bgw, @​sampoder, and @​styfle for helping!

v16.3.0-preview.7

Compare Source

Example Changes
  • fix: error handling and loading states in with-apollo-and-redux example: #​91457
Misc Changes
  • Upgrade React from 172742b4-20260716 to 81e442ea-20260721: #​96016
  • Fix Turbopack middleware matcher with i18n single locale: #​96014
  • Improve performance of validating MPA form submissions: #​96013
  • Enforce serverActions.bodySizeLimit for Server Actions in Edge runtime: #​96012
  • Set correct origin for internal redirects in custom server: #​96011
  • Ensure exotic rewrite param values are properly encoded: #​96010
  • fix(fetch-cache): key fetch(Request, init) by the effective request: #​96009
  • fix(incremental-cache): byte-exact fetch cache key for binary bodies: #​96008
  • Validate server reference IDs during manifest lookup: #​96007
  • fix(next/image): improve performance of detectContentType() : #​96006
  • Preserve basePath in redirect destinations: #​95608
  • [ci] Skip passed-tests cache steps for jobs that never run tests: #​96001
  • docs: add upgrade section to installation and expand AI agents guide: #​95861
  • docs: fix unstable_cache syntax error: #​96002
  • Insights: use a single Learn more link in console errors: #​95967
  • Refine development validation signal handling: #​95998
  • Include examples of static export tools & GitHub Pages template: #​95929
  • docs: note the :has() scaling limit in the Interactive apps guide: #​95925
  • Prevent unhandled rejections when a "use cache" cache handler errors: #​95985
  • [test] Add coverage for throwing custom "use cache" cache handler: #​95984
  • docs: clarify layout.js nesting behavior in route groups: #​95720
  • Fix instant validation blocking navigations: #​95939
  • [ci] Share a single browser instance across all test suites in a single job: #​95589
  • [turbopack] Rename turbopackTreeShaking to turbopackModuleFragments: #​95978
  • cna: use LayoutProps helper in TS layout templates: #​95675
  • [turbopack] Skip redundant top-level root updates: #​95903
  • [turbopack] Drop unused exports from a CJS module: #​95716
  • Turbopack: Simplify parent directory creation retry loop logic: #​95835
  • Run Rust doctests in CI: #​95911
  • docs: add 'Set up your editor' to the installation guide: #​95928
  • fix(cms-contentful): await draftMode() and use Promise<> params type: #​95631
  • Move outputHashSalt out of experimental: #​95840
  • Move immutable static assets config option out of experimental: #​95351
  • [instant] Let dev-server requests bypass the fetch lock: #​95761
  • Upgrade React from 7023f501-20260714 to 172742b4-20260716: #​95901
  • Fix Rust doctest failures: #​95909
  • [turbopack] Clean up server_chunking_context: #​95908
  • [turbopack] Don't SSR on pages only navigated to through a soft nav: #​95539
  • Package skills/ as a Claude Code plugin: #​95907
  • [ci] Avoid apt-get in the next-stats-action Docker image: #​95847
  • Back/forward set the Nav Inspector back to pending: #​95865
  • fix(agent-rules): pad managed AGENTS.md block with blank lines: #​95892
  • Revert "Run more test suites under cacheComponents flag": #​95884
  • Fix repeated navigations while the Instant Navigation lock is held: #​95864
  • Run more test suites under cacheComponents flag: #​95878
  • Unify appShells flag with Partial Prefetching: #​95415
  • Fix Request Insights span collection: #​95818
  • Revert "Replay same-document traversals that happen before hydration": #​95853
  • [ci] Allow running all deploy tests with builds from a private registry: #​95784
  • [turbopack] Only ship pages-router routes in the client chunk-group bootstrap manifest: #​94671
  • [turbopack] Inline the chunk group bootstrap in Next.js to drop the per-route runtime: #​94666
  • [turbopack] Add chunk_group_bootstrap_params and the chunk-loading global to the build manifest: #​94663
  • [turbopack] Add registerEntry() to handle inline bootstrapping: #​94664
  • [turbopack] Add inline_chunk_group_bootstrap to BrowserChunkingContext and chunk_group_bootstrap_params to ChunkGroupResult: #​94661
  • [turbopack] Create a chunk_group_bootstrap_params() function: #​94631
  • [turbopack] Create a shared asset with browser runtime code: #​94586
  • Turbopack: trace externals imported only by server actions: #​95824
  • [turbopack] Generate component chunks for each merged group to increase cache hits: #​95261
  • Exclude stale under 5 minutes from app shells: #​95833
  • docs: remove experimental @​next/routing note: #​94903
  • [turbopack] Tell agents not to mention next.config.js options: #​95825
  • chore: Remove stale build warning: #​95813
  • Replay same-document traversals that happen before hydration: #​95682
  • docs: cssChunking graph option: #​95693
  • [Bench] Extend bench app to have realistic client chunk counts: #​95814
  • Add more realistic bench fixtures: #​95807
  • Fix Request Insights subscription initialization: #​95794
  • Model async userland loading in app routes as a state machine: #​95791
  • Preserve init errors from async route modules: #​95799
  • Fix cache warming and static params for metadata images with top-level await: #​95790
  • Only track pending imports for real promises: #​95789
  • Support metadata routes in --debug-build-paths: #​95788
  • Respect NEXT_HASH_SALT for server side assetsHashes: #​95738
  • telemetry: add agentName to anonymous metadata: #​95586
  • [turbopack] Optimize the implementation of AutoMap/AutoSet
    : #​95694
  • Better support the CLI spinner when running the TSC CLI: #​95753
  • Upgrade React from 5123b063-20260708 to 7023f501-20260714: #​95782
  • docs: add route-side URL data audit to the Partial Prefetching adoption guide: #​95389
  • docs: revalidateTag with expire zero, for route handlers: #​95760
  • request insights: add DevTools request panel (5/5): #​93978
  • docs: Improve immutable static docs: #​95752
  • Add React sync development skill: #​95620
  • docs: useSearchParams example stray link: #​95759
  • Improve the NFT error message and ignore comment handling: #​95144
  • Upgrade to swc 73: #​95731
  • [turbopack] Switch make_production_chunks to use floats: #​95749
  • Fix termination handling: #​95692
  • Restore canary version 16.3.0-canary.84 after v16.3.0-preview.6 preview release
Credits

Huge thanks to @​vercel-release-bot, @​eps1lon, @​ZaforAbdullah, @​gaojude, @​aurorascharff, @​icyJoseph, @​timneutkens, @​WildChargerTV, @​ankurdotio, @​bgw, @​sampoder, @​marcoshernanz, @​manoraj, @​mischnic, @​acdlite, @​gaearon, @​gnoff, @​andrewimm, @​lukesandberg, and @​feedthejim for helping!

postcss/postcss (postcss)

v8.5.22

Compare Source

v8.5.21

Compare Source

react/react (react)

v19.2.8

Compare Source

react/react (react-dom)

v19.2.8

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "on Saturday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the renovate label Jul 25, 2026
@renovate
renovate Bot merged commit 0732ea1 into main Jul 25, 2026
5 checks passed
@renovate
renovate Bot deleted the renovate/all-minor-patch branch July 25, 2026 04:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Development

Successfully merging this pull request may close these issues.

0 participants