Skip to content

build: bump the dependencies group across 1 directory with 5 updates - #60

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-a4def2847b
Open

build: bump the dependencies group across 1 directory with 5 updates#60
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-a4def2847b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 5 updates in the / directory:

Package From To
@biomejs/biome 2.4.15 2.5.5
@types/node 25.9.1 26.1.1
@vercel/node 5.8.5 5.8.27
typescript 6.0.3 7.0.2
vercel 54.5.0 57.0.0

Updates @biomejs/biome from 2.4.15 to 2.5.5

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.5

2.5.5

Patch Changes

  • #10972 ab8c21b Thanks @​ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:

    declare const value: 1n | 2n;
switch (value) {
  case 1n:
    break;
}

  • #10972 ab8c21b Thanks @​ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:

    type Recursive = Recursive;
declare const value: Recursive;
String(value);
value || "fallback";

  • #10977 0bf7486 Thanks @​ematipico! - Fixed #10922: the action useSortedAttributes no longer triggers for HTML instructions.

  • #10957 cf263c4 Thanks @​dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

  • #10983 edc0ed7 Thanks @​ayaangazali! - Fixed #10980: useAriaPropsSupportedByRole no longer reports false positives when the attribute that determines an element's implicit ARIA role is written as a shorthand attribute, such as <a {href} aria-label="..."> in Astro and Svelte files.

    Shorthand attributes are now taken into account when computing the implicit role, so the anchor above correctly resolves to the link role instead of generic.

  • #10889 89526e3 Thanks @​denbezrukov! - Fixed CSS formatter casing for syntax-owned names while preserving author-defined names, including scoped keyframes and container scroll-state queries.

    - A:HOVER { COLOR: INITIAL; }
+ A:hover { color: initial; }
- @KEYFRAMES :GLOBAL KeepFrames { FROM { COLOR: RED; } }
+ @keyframes :GLOBAL KeepFrames { from { color: RED; } }
- @CONTAINER scroll-state((SCROLLED: TOP) AND (STUCK)) { A:HOVER { COLOR: RED; } }
+ @container scroll-state((SCROLLED: TOP) AND (STUCK)) { A:hover { color: RED; } }

  • #10964 794ccd0 Thanks @​denbezrukov! - Fixed CSS formatting for comments between declaration values and !important.

    -a { color: /* before */ /* after */ red !important; }
+a { color: /* before */ red /* after */ !important; }

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.5

Patch Changes

  • #10972 ab8c21b Thanks @​ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:

    declare const value: 1n | 2n;
switch (value) {
  case 1n:
    break;
}

  • #10972 ab8c21b Thanks @​ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:

    type Recursive = Recursive;
declare const value: Recursive;
String(value);
value || "fallback";

  • #10977 0bf7486 Thanks @​ematipico! - Fixed #10922: the action useSortedAttributes no longer triggers for HTML instructions.

  • #10957 cf263c4 Thanks @​dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

  • #10983 edc0ed7 Thanks @​ayaangazali! - Fixed #10980: useAriaPropsSupportedByRole no longer reports false positives when the attribute that determines an element's implicit ARIA role is written as a shorthand attribute, such as <a {href} aria-label="..."> in Astro and Svelte files.

    Shorthand attributes are now taken into account when computing the implicit role, so the anchor above correctly resolves to the link role instead of generic.

  • #10889 89526e3 Thanks @​denbezrukov! - Fixed CSS formatter casing for syntax-owned names while preserving author-defined names, including scoped keyframes and container scroll-state queries.

    - A:HOVER { COLOR: INITIAL; }
+ A:hover { color: initial; }
- @KEYFRAMES :GLOBAL KeepFrames { FROM { COLOR: RED; } }
+ @keyframes :GLOBAL KeepFrames { from { color: RED; } }
- @CONTAINER scroll-state((SCROLLED: TOP) AND (STUCK)) { A:HOVER { COLOR: RED; } }
+ @container scroll-state((SCROLLED: TOP) AND (STUCK)) { A:hover { color: RED; } }

  • #10964 794ccd0 Thanks @​denbezrukov! - Fixed CSS formatting for comments between declaration values and !important.

    -a { color: /* before */ /* after */ red !important; }
+a { color: /* before */ red /* after */ !important; }

... (truncated)

Commits

Updates @types/node from 25.9.1 to 26.1.1

Commits

Updates @vercel/node from 5.8.5 to 5.8.27

Release notes

Sourced from @​vercel/node's releases.

@​vercel/node@​5.8.27

Patch Changes

  • Updated dependencies [7dd4301]
    • @​vercel/build-utils@​13.35.0
Changelog

Sourced from @​vercel/node's changelog.

5.8.27

Patch Changes

  • Updated dependencies [7dd4301]
    • @​vercel/build-utils@​13.35.0

5.8.26

Patch Changes

  • Updated dependencies [238543c]
    • @​vercel/build-utils@​13.34.0

5.8.25

Patch Changes

  • Updated dependencies [def07fc]
    • @​vercel/build-utils@​13.33.1

5.8.24

Patch Changes

  • Updated dependencies [607f0ef]
    • @​vercel/build-utils@​13.33.0

5.8.23

Patch Changes

  • Updated dependencies [7b30856]
    • @​vercel/build-utils@​13.32.3

5.8.22

Patch Changes

  • Updated dependencies [6b49a17]
    • @​vercel/build-utils@​13.32.2

5.8.21

Patch Changes

  • Updated dependencies [8dc4702]
    • @​vercel/build-utils@​13.32.1

5.8.20

... (truncated)

Commits

Updates typescript from 6.0.3 to 7.0.2

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for typescript since your current version.


Updates vercel from 54.5.0 to 57.0.0

Release notes

Sourced from vercel's releases.

vercel@57.0.0

Minor Changes

  • 7dd4301: Make service bindings type optional.

Patch Changes

  • 3a066fe: Add a resolved attribute to the vc.importBuilders trace span recording each Builder's resolved version and source directory
  • b40db5b: Improve vc alerts and vc alerts rules output for custom alerts, including readable inspect views, custom alert rule filtering, compact rule tables, and normalized alert timestamps.
  • fca6de2: Added a notice when a project's first vercel deploy (without --prod) is assigned to production by the API. The notice explains that this is expected behavior for the first deployment and that future deployments will be preview deployments unless --prod is used. In non-interactive mode, the hint is included in the JSON payload and the "Promote to production" next command is omitted since the deployment is already production.
  • 6e29745: Gate the native CLI binary trampoline behind an explicit opt-in. The native @vercel/vc-native-* binary is only spawned when the user opts in via vercel upgrade --enable-binary (or the useNativeBinary global config flag); members of the vercel team are auto-opted-in when their teams are already loaded. Adds a zod-free @vercel/cli-config/paths subpath so the opt-in flag can be read on the CLI startup hot path without loading zod.
  • e4a7a58: Fix the native trampoline resolving the native binary through NODE_PATH: require.resolve() consults NODE_PATH and the global folders even when paths is given, so the native package is now located with an explicit walk up this install's own node_modules tree
  • a5439da: Expose pprState in vc logs output, alongside the existing cache status and reason, so users can see how a PPR page was served (fully_static / partially_dynamic / fully_dynamic).
  • 3540322: Preserve the selected team scope across re-authentication. vercel login no longer resets currentTeam to the default team when re-authenticating: the previous selection is kept when the authenticated user is still a member of that team, and only falls back to the default scope (with a warning) otherwise. vercel teams switch no longer hard-fails when the persisted team is stale (deleted or membership revoked), so it can always be used to switch away.
  • ae12b01: Expose the resolved rewrite destination as the request path observed by Python framework applications, and warn affected Python projects about the behavior change.
  • Updated dependencies [7dd4301]
  • Updated dependencies [bfa1873]
  • Updated dependencies [9a4f1e7]
  • Updated dependencies [6e29745]
  • Updated dependencies [ae12b01]
  • Updated dependencies [67d02cb]
    • @​vercel/build-utils@​13.35.0
    • @​vercel/python@​6.52.0
    • @​vercel/cli-config@​0.2.1
    • @​vercel/container@​0.1.0
    • @​vercel/backends@​0.8.26
    • @​vercel/elysia@​0.1.103
    • @​vercel/express@​0.1.117
    • @​vercel/fastify@​0.1.106
    • @​vercel/go@​3.10.2
    • @​vercel/h3@​0.1.112
    • @​vercel/hono@​0.2.106
    • @​vercel/hydrogen@​1.4.0
    • @​vercel/koa@​0.1.86
    • @​vercel/nestjs@​0.2.107
    • @​vercel/next@​4.20.4
    • @​vercel/node@​5.8.27
    • @​vercel/redwood@​2.5.0
    • @​vercel/remix-builder@​5.9.1
    • @​vercel/ruby@​2.5.1
    • @​vercel/rust@​1.4.0
    • @​vercel/static-build@​2.11.9
    • @​vercel/cli-auth@​0.3.1
Changelog

Sourced from vercel's changelog.

57.0.0

Minor Changes

  • 7dd4301: Make service bindings type optional.

Patch Changes

  • 3a066fe: Add a resolved attribute to the vc.importBuilders trace span recording each Builder's resolved version and source directory
  • b40db5b: Improve vc alerts and vc alerts rules output for custom alerts, including readable inspect views, custom alert rule filtering, compact rule tables, and normalized alert timestamps.
  • fca6de2: Added a notice when a project's first vercel deploy (without --prod) is assigned to production by the API. The notice explains that this is expected behavior for the first deployment and that future deployments will be preview deployments unless --prod is used. In non-interactive mode, the hint is included in the JSON payload and the "Promote to production" next command is omitted since the deployment is already production.
  • 6e29745: Gate the native CLI binary trampoline behind an explicit opt-in. The native @vercel/vc-native-* binary is only spawned when the user opts in via vercel upgrade --enable-binary (or the useNativeBinary global config flag); members of the vercel team are auto-opted-in when their teams are already loaded. Adds a zod-free @vercel/cli-config/paths subpath so the opt-in flag can be read on the CLI startup hot path without loading zod.
  • e4a7a58: Fix the native trampoline resolving the native binary through NODE_PATH: require.resolve() consults NODE_PATH and the global folders even when paths is given, so the native package is now located with an explicit walk up this install's own node_modules tree
  • a5439da: Expose pprState in vc logs output, alongside the existing cache status and reason, so users can see how a PPR page was served (fully_static / partially_dynamic / fully_dynamic).
  • 3540322: Preserve the selected team scope across re-authentication. vercel login no longer resets currentTeam to the default team when re-authenticating: the previous selection is kept when the authenticated user is still a member of that team, and only falls back to the default scope (with a warning) otherwise. vercel teams switch no longer hard-fails when the persisted team is stale (deleted or membership revoked), so it can always be used to switch away.
  • ae12b01: Expose the resolved rewrite destination as the request path observed by Python framework applications, and warn affected Python projects about the behavior change.
  • Updated dependencies [7dd4301]
  • Updated dependencies [bfa1873]
  • Updated dependencies [9a4f1e7]
  • Updated dependencies [6e29745]
  • Updated dependencies [ae12b01]
  • Updated dependencies [67d02cb]
    • @​vercel/build-utils@​13.35.0
    • @​vercel/python@​6.52.0
    • @​vercel/cli-config@​0.2.1
    • @​vercel/container@​0.1.0
    • @​vercel/backends@​0.8.26
    • @​vercel/elysia@​0.1.103
    • @​vercel/express@​0.1.117
    • @​vercel/fastify@​0.1.106
    • @​vercel/go@​3.10.2
    • @​vercel/h3@​0.1.112
    • @​vercel/hono@​0.2.106
    • @​vercel/hydrogen@​1.4.0
    • @​vercel/koa@​0.1.86
    • @​vercel/nestjs@​0.2.107
    • @​vercel/next@​4.20.4
    • @​vercel/node@​5.8.27
    • @​vercel/redwood@​2.5.0
    • @​vercel/remix-builder@​5.9.1
    • @​vercel/ruby@​2.5.1
    • @​vercel/rust@​1.4.0
    • @​vercel/static-build@​2.11.9
    • @​vercel/cli-auth@​0.3.1

56.5.0

Minor Changes

  • ab9c775: Add vercel ai-gateway budgets set/list/remove commands

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 1, 2026
@dependabot
dependabot Bot requested a review from sutne as a code owner August 1, 2026 16:33
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 1, 2026
@vercel

vercel Bot commented Aug 1, 2026 •
edited
Loading

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
personal-api Ready Ready Preview Aug 4, 2026 6:58am

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dependencies-a4def2847b branch from 3b48d80 to e885fdb Compare August 3, 2026 09:56
@sutne
build: bump the dependencies group across 1 directory with 5 updates
8bf1e46 
Signed-off-by: dependabot[bot] <support@github.com>
@sutne
sutne force-pushed the dependabot/npm_and_yarn/dependencies-a4def2847b branch from e885fdb to 8bf1e46 Compare August 4, 2026 06:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sutne sutne Awaiting requested review from sutne sutne is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@sutne