chore: Bump the tooling group in /tools with 4 updates

[dependabot]

Bumps the tooling group in /tools with 4 updates: @biomejs/biome, @sourcemeta/jsonschema, cspell and markdownlint-cli2.

Updates @biomejs/biome from 2.5.8 to 2.5.9

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.9

2.5.9

Patch Changes

• #11321 41386f3 Thanks @​dyc3! - Fixed #11315: The CSS parser now recovers at declaration boundaries after bogus declarations, allowing subsequent valid declarations to be parsed.

• #11248 57b197e Thanks @​yanthomasdev! - Expanded the environment variable metadata used by biome rage to include BIOME_BINARY, BIOME_LOG_FILE, and RUST_BACKTRACE as well as reworded explanations for better readability.

• #11377 a8798ea Thanks @​Netail! - Added a new nursery rule useNamedLayer which disallows anonymous cascade layers.

  @layer {
    a {
      color: red;
    }
  }

• #11327 6771cf5 Thanks @​dyc3! - The HTML formatter now preserves meaningful blank lines in HTML, including spacing after elements with trailing spaces and blank lines between comment groups.

   <div>
     <!-- first group -->
  +
     <!-- second group -->
   </div>

• #10312 ba8aa18 Thanks @​dyc3! - Added the nursery rule useTailwindShorthandClasses, which suggests shorter Tailwind utility classes. For example, the rule suggests replacing w-4 h-4 with size-4.

• #11333 715e0cd Thanks @​kkkhs! - Fixed #11328: lint/nursery/useExpect now recognizes Vitest Browser Mode expect.element() calls as assertions.

• #11343 9b98211 Thanks @​johncarmack1984! - Fixed #11311: the CSS parser now accepts Tailwind container-query variant names in @variant, such as @xl and @max-xl. These previously produced a parse error and a noUnknownAtRules diagnostic.

  @variant @xl {
    div {
      background: red;
    }
  }

• #11220 3e8c488 Thanks @​santichausis! - Fixed #9541: noUndeclaredVariables, noUnusedImports, and noUnusedVariables now correctly recognise exported variables and functions declared in one embedded <script> block as usable from a sibling <script> block, in Svelte's <script module>/<script> pair and Vue's non-setup <script> blocks.

  For example, Biome no longer reports greet as undeclared in the following Svelte component:

  <script module>

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.9

Patch Changes

• #11321 41386f3 Thanks @​dyc3! - Fixed #11315: The CSS parser now recovers at declaration boundaries after bogus declarations, allowing subsequent valid declarations to be parsed.

• #11248 57b197e Thanks @​yanthomasdev! - Expanded the environment variable metadata used by biome rage to include BIOME_BINARY, BIOME_LOG_FILE, and RUST_BACKTRACE as well as reworded explanations for better readability.

• #11377 a8798ea Thanks @​Netail! - Added a new nursery rule useNamedLayer which disallows anonymous cascade layers.

  @layer {
    a {
      color: red;
    }
  }

• #11327 6771cf5 Thanks @​dyc3! - The HTML formatter now preserves meaningful blank lines in HTML, including spacing after elements with trailing spaces and blank lines between comment groups.

   <div>
     <!-- first group -->
  +
     <!-- second group -->
   </div>

• #10312 ba8aa18 Thanks @​dyc3! - Added the nursery rule useTailwindShorthandClasses, which suggests shorter Tailwind utility classes. For example, the rule suggests replacing w-4 h-4 with size-4.

• #11333 715e0cd Thanks @​kkkhs! - Fixed #11328: lint/nursery/useExpect now recognizes Vitest Browser Mode expect.element() calls as assertions.

• #11343 9b98211 Thanks @​johncarmack1984! - Fixed #11311: the CSS parser now accepts Tailwind container-query variant names in @variant, such as @xl and @max-xl. These previously produced a parse error and a noUnknownAtRules diagnostic.

  @variant @xl {
    div {
      background: red;
    }
  }

• #11220 3e8c488 Thanks @​santichausis! - Fixed #9541: noUndeclaredVariables, noUnusedImports, and noUnusedVariables now correctly recognise exported variables and functions declared in one embedded <script> block as usable from a sibling <script> block, in Svelte's <script module>/<script> pair and Vue's non-setup <script> blocks.

  For example, Biome no longer reports greet as undeclared in the following Svelte component:

  <script module>
    export function greet() {
      console.log("Hello!");

... (truncated)

Commits

• 2081460 ci: release (#11309)
• 6559e6c feat: adds the useAstroClientOnlyDirectiveValue rule for .astro files (#11299)
• a8798ea feat: useNamedLayer (#11377)
• 85aac73 feat(lint): add noUnsafeTypeAssertion rule (#11221)
• e65f07e feat(lint): nursery useControlLabel (#11312)
• ba8aa18 feat(lint): add useTailwindShorthandClasses (#10312)
• See full diff in compare view

Updates @sourcemeta/jsonschema from 16.7.0 to 16.8.0

Release notes

Sourced from @​sourcemeta/jsonschema's releases.

v16.8.0

What's Changed

• Fix subtle precision issues on the decimal JSON type by @​jviotti in sourcemeta/jsonschema#806
• Support parallelism on the test command by @​jviotti in sourcemeta/jsonschema#803
• Clarify language tag requirements for JSON-LD in the rdf command by @​BigBlueHat in sourcemeta/jsonschema#807
• Speed up schema compilation in the test command by @​jviotti in sourcemeta/jsonschema#808
• Make use of a Tag URI to identify a schema from standard input by @​jviotti in sourcemeta/jsonschema#811
• Fix some subtle JSON and YAML CLRF parsing issues on Windows by @​jviotti in sourcemeta/jsonschema#812
• Fix validate --benchmark printing errors twice by @​jviotti in sourcemeta/jsonschema#820
• Use proper diff output on fmt --check by @​jviotti in sourcemeta/jsonschema#825

New Contributors

• @​BigBlueHat made their first contribution in sourcemeta/jsonschema#807

Full Changelog: sourcemeta/jsonschema@v16.7.0...v16.8.0

Commits

• 5a42c7f v16.8.0
• 6a9b01c Adopt upstream clitest binary from Core (#826)
• b38bab9 Use a proper diff output on fmt --check (#825)
• 6fe7592 Upgrade Core and Blaze to the latest versions (#824)
• 13dfdad Clarify non-copy-left licensing option for enterprises (#823)
• e7ab75e Clearly separate literals and patterns in the test DSL (#822)
• 183804a Do a pass removing duplicate tests and strengthening weak ones (#821)
• e35ae04 Fix validate --benchmark printing errors twice (#820)
• 135bc54 Derive the expected version in the help tests from $VERSION (#818)
• e32d995 Replace the stdout extraction idiom with an EXTRACT command (#817)
• Additional commits viewable in compare view

Updates cspell from 9.8.0 to 10.0.1

Release notes

Sourced from cspell's releases.

v10.0.1

Fixes

fix(cli): ignore closed readline after stdin (#8862)

What changed

Wrap the stdin readline async iterator so CSpell ignores the terminal readline was closed error that can occur after stdin has already yielded its file list.

Other readline errors are still rethrown.

Why

Fixes #8778. On Node 24, cspell lint --file-list stdin can finish processing a large stdin file list and then report Linter Error: readline was closed instead of completing cleanly.

Tests

Added unit coverage for:

• preserving all yielded stdin lines when readline throws readline was closed after reading
• continuing to throw unrelated readline errors

I could not run the package test command locally in this sandbox because the checkout has no node_modules, and Corepack is blocked from creating its user cache directory (EPERM under ~/.cache/node/corepack).

---

fix(docs): replace .json with package.json in configuration docs (#8861)

Fix

In the package.json configuration section, the sentence referred to "the .json file" instead of "the package.json file".

Before: "CSpell looks for the configuration in the cspell field of the .json file." After: "CSpell looks for the configuration in the cspell field of the package.json file."

---

fix: substitution display and ranges for output checking (#8838)

... (truncated)

Changelog

Sourced from cspell's changelog.

v10.0.1 (2026-05-31)

Fixes

fix(cli): ignore closed readline after stdin (#8862)

What changed

Wrap the stdin readline async iterator so CSpell ignores the terminal readline was closed error that can occur after stdin has already yielded its file list.

Other readline errors are still rethrown.

Why

Fixes #8778. On Node 24, cspell lint --file-list stdin can finish processing a large stdin file list and then report Linter Error: readline was closed instead of completing cleanly.

Tests

Added unit coverage for:

• preserving all yielded stdin lines when readline throws readline was closed after reading
• continuing to throw unrelated readline errors

I could not run the package test command locally in this sandbox because the checkout has no node_modules, and Corepack is blocked from creating its user cache directory (EPERM under ~/.cache/node/corepack).

---

fix(docs): replace .json with package.json in configuration docs (#8861)

Fix

In the package.json configuration section, the sentence referred to "the .json file" instead of "the package.json file".

Before: "CSpell looks for the configuration in the cspell field of the .json file." After: "CSpell looks for the configuration in the cspell field of the package.json file."

---

... (truncated)

Commits

• 0f43abf v10.0.1
• 39e5ccd chore: Prepare Release v10.0.1 (auto-deploy) (#8796)
• da51d83 fix(cli): ignore closed readline after stdin (#8862)
• ef9b0dc fix: substitution display and ranges for output checking (#8838)
• 7cf15af ci: Workflow Bot -- Update ALL Dependencies (main) (#8833)
• 13144fe ci: Workflow Bot -- Update ALL Dependencies (main) (#8802)
• 6ddfd57 v10.0.0
• 9ab431c chore: Prepare Release v10.0.0 (auto-deploy) (#8781)
• ef406ee feat!: Drop support for Node 20 (#8779)
• See full diff in compare view

Updates markdownlint-cli2 from 0.22.1 to 0.23.2

Changelog

Sourced from markdownlint-cli2's changelog.

0.23.2

• Update dependencies

0.23.1

• Show attempted fix counts after fixing
• Update dependencies (including markdownlint)

0.23.0

• Add overrides configuration option
• Improve options/configuration file handling
• Update dependencies (including markdownlint)
• Remove support for end-of-life Node 20

Commits

• b82a6c8 Update to version 0.23.2.
• e4e659d Add a stub for process.nextTick (using queueMicrotask) now that globby (indir...
• 99760af Bump globby from 16.2.1 to 16.2.2
• 3070236 Address new ESLint warnings from previous commit.
• 6e3cc93 Bump eslint-plugin-unicorn from 71.1.0 to 72.0.0
• 4ba8177 Add eslint-package-json/all to lint script, address new issues.
• 9cb99b2 Refactor eslint.config.mjs to use defineConfig, change eslint-plugin-n from "...
• 37fb0ec Address new ESLint warnings from previous commit.
• f7fea61 Bump eslint-node-test from 0.2.0 to 0.3.0
• 85bb5e7 Bump js-yaml from 5.2.1 to 5.2.2
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions