chore(deps): bump the monorepo-dependencies group across 1 directory with 11 updates by dependabot[bot] · Pull Request #23 · webllm/renderify

dependabot · 2026-07-10T23:43:38Z

Bumps the monorepo-dependencies group with 11 updates in the / directory:

Package	From	To
@biomejs/biome	`2.4.15`	`2.5.3`
@types/node	`25.7.0`	`26.1.1`
commitizen	`4.3.1`	`4.3.2`
lint-staged	`17.0.4`	`17.0.8`
playwright	`1.60.0`	`1.61.1`
preact	`10.29.1`	`10.29.7`
tsx	`4.21.0`	`4.23.0`
turbo	`2.9.12`	`2.10.4`
typescript	`6.0.3`	`7.0.2`
preact-render-to-string	`6.6.7`	`6.7.0`
es-module-lexer	`2.1.0`	`2.3.1`

Updates @biomejs/biome from 2.4.15 to 2.5.3

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.5.3

2.5.3

Patch Changes

#10815 86613d5 Thanks @WaterWhisperer! - Fixed a parser panic reported in #10708: Biome now recovers when unsupported CSS Modules @value rules or scoped @keyframes names end at EOF.

#10534 da9b403 Thanks @Mokto! - Fixed noUnusedVariables false positives in Svelte files: Svelte store subscriptions ($store references in templates now keep the underlying store binding from being flagged), and $bindable() props that are only written to in the script block (write-only is intentional for bindable props) are no longer reported as unused.

#10827 098ba41 Thanks @Aqu1bp! - Fixed #10698: The noUnsafeOptionalChaining rule now reports unsafe optional chains wrapped in TypeScript as, satisfies, type assertion, and instantiation expressions, such as new (value?.constructor as Constructor)().

#10773 3c6513d Thanks @otkrickey! - Fixed #10772: useVueValidVOn no longer reports a missing handler for v-on directives using a verb modifier (.stop / .prevent) without an expression, e.g. <div @click.stop></div>. The rule also accepts the arg-less object syntax <div v-on="$listeners"></div> instead of reporting a missing event name.

#10721 d83c66b Thanks @minseong0324! - Improved type-aware lint rule inference for built-in globals and indexed function calls. Biome now resolves Error(...), new Error(...), optional Error#stack, and calls through indexed function values such as handlers[0](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/0) more accurately.

#10865 6450276 Thanks @ematipico! - Fixed #10845. Biome Language Server no longer goes in deadlock when the scanner is enabled.

#10853 93d8e53 Thanks @Netail! - Fixed #10840: Astro shorthand attribute syntax is now correctly being parsed from embedded nodes.

#10820 bba3092 Thanks @JamBalaya56562! - Fixed #10619: noProcessEnv now also reports computed (bracket) member access. Previously only dot access was checked, so process["env"] and env["NODE_ENV"] (where env is imported from node:process) were missed. Both static and computed accesses are now reported.

#10835 3447b2f Thanks @dyc3! - Fixed #10824: useDomQuerySelector now supports an ignore option for receiver identifiers that should not be reported.

#10875 b12e486 Thanks @dyc3! - Fixed #10795: --profile-rules now reports timings for each plugin separately as plugin/<pluginName>, matching the naming used by plugin suppressions, instead of aggregating all plugins under a single plugin/plugin entry.

#10877 d6bc447 Thanks @ematipico! - Fixed biome-zed#164: Biome no longer inserts stray whitespace when format-on-type runs after closing delimiters such as ), ], and }.

#10867 a21463e Thanks @dyc3! - Fixed #10864: Biome no longer crashes when checking or linting HTML files with unquoted attribute values such as <textarea rows=4></textarea>.

What's Changed

fix(useVueValidVOn): allow verb-modifier-only handlers and object syntax by @otkrickey in biomejs/biome#10773

fix(css_parser): recover CSS Modules syntax at EOF by @WaterWhisperer in biomejs/biome#10815

feat(fmt/yaml): sequence mapping by @ematipico in biomejs/biome#10814

fix(lint): handle TypeScript wrappers in unsafe optional chains by @Aqu1bp in biomejs/biome#10827

fix(lint): report computed member access in noProcessEnv by @JamBalaya56562 in biomejs/biome#10820

ci: ignore quick-xml RustSec advisories by @JamBalaya56562 in biomejs/biome#10831

perf(core): embedded ranges plumbing by @ematipico in biomejs/biome#10836

feat(md/fmt): more compatibility gains by @ematipico in biomejs/biome#10833

chore(xtask): migrate Error global type by @minseong0324 in biomejs/biome#10721

fix(lint): suppress false positives in noUnusedVariables for Svelte store subscriptions and $bindable() props by @Mokto in biomejs/biome#10534

refactor(md/parse): reduce emitted nodes by @ematipico in biomejs/biome#10847

feat(md/fmt): quotes, thematic breaks and link definition by @ematipico in biomejs/biome#10844

refactor(md/parse): parse HTML into one single node by @ematipico in biomejs/biome#10848

docs(noMissingVarFunction): list container-name in ignored properties by @dfedoryshchev in biomejs/biome#10852

refactor(md/parse): fold code content lines and indentation runs by @ematipico in biomejs/biome#10851

fix: astro shorthand syntax embedded nodes by @Netail in biomejs/biome#10853

chore(xtask): migrate disposable global types by @minseong0324 in biomejs/biome#10841

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.5.3

Patch Changes

#10815 86613d5 Thanks @WaterWhisperer! - Fixed a parser panic reported in #10708: Biome now recovers when unsupported CSS Modules @value rules or scoped @keyframes names end at EOF.

#10534 da9b403 Thanks @Mokto! - Fixed noUnusedVariables false positives in Svelte files: Svelte store subscriptions ($store references in templates now keep the underlying store binding from being flagged), and $bindable() props that are only written to in the script block (write-only is intentional for bindable props) are no longer reported as unused.

#10827 098ba41 Thanks @Aqu1bp! - Fixed #10698: The noUnsafeOptionalChaining rule now reports unsafe optional chains wrapped in TypeScript as, satisfies, type assertion, and instantiation expressions, such as new (value?.constructor as Constructor)().

#10773 3c6513d Thanks @otkrickey! - Fixed #10772: useVueValidVOn no longer reports a missing handler for v-on directives using a verb modifier (.stop / .prevent) without an expression, e.g. <div @click.stop></div>. The rule also accepts the arg-less object syntax <div v-on="$listeners"></div> instead of reporting a missing event name.

#10721 d83c66b Thanks @minseong0324! - Improved type-aware lint rule inference for built-in globals and indexed function calls. Biome now resolves Error(...), new Error(...), optional Error#stack, and calls through indexed function values such as handlers[0](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/0) more accurately.

#10865 6450276 Thanks @ematipico! - Fixed #10845. Biome Language Server no longer goes in deadlock when the scanner is enabled.

#10853 93d8e53 Thanks @Netail! - Fixed #10840: Astro shorthand attribute syntax is now correctly being parsed from embedded nodes.

#10820 bba3092 Thanks @JamBalaya56562! - Fixed #10619: noProcessEnv now also reports computed (bracket) member access. Previously only dot access was checked, so process["env"] and env["NODE_ENV"] (where env is imported from node:process) were missed. Both static and computed accesses are now reported.

#10835 3447b2f Thanks @dyc3! - Fixed #10824: useDomQuerySelector now supports an ignore option for receiver identifiers that should not be reported.

#10875 b12e486 Thanks @dyc3! - Fixed #10795: --profile-rules now reports timings for each plugin separately as plugin/<pluginName>, matching the naming used by plugin suppressions, instead of aggregating all plugins under a single plugin/plugin entry.

#10877 d6bc447 Thanks @ematipico! - Fixed biome-zed#164: Biome no longer inserts stray whitespace when format-on-type runs after closing delimiters such as ), ], and }.

#10867 a21463e Thanks @dyc3! - Fixed #10864: Biome no longer crashes when checking or linting HTML files with unquoted attribute values such as <textarea rows=4></textarea>.

2.5.2

Patch Changes
#10595 f458028 Thanks @pkallos! - Added the option ignoreBooleanCoercion to useNullishCoalescing. When enabled, Biome ignores || and ||= used inside a Boolean() call, where coalescing on falsy values is intentional.

#10798 4a32b63 Thanks @pkallos! - Added the option ignorePrimitives to useNullishCoalescing. When enabled, Biome ignores ||, ||=, and ternary expressions whose non-nullish operands are all primitives the option opts out of. Use true to ignore all primitives, or an object selecting string, number, boolean, or bigint.
#10545 f3d4c00 Thanks @Mokto! - Added the new nursery rule noSvelteUnnecessaryStateWrap, which reports unnecessary $state() wrapping of classes from svelte/reactivity that are already reactive.
<script>
import { SvelteMap } from "svelte/reactivity";
const map = $state(new SvelteMap()); // redundant
</script>
#10752 f62fb8b Thanks @ematipico! - Fixed #10739. Now the rule useValidAutocomplete correctly flags the autoComplete attribute.

#10796 f1b3ab2 Thanks @ematipico! - Fixed #10768. Improved the performance of the Biome Language Server by cancelling certain in-flight operations when there are fast updates.

#10719 aa649b5 Thanks @minseong0324! - Fixed noMisleadingReturnType false positive on returns that use a widening type assertion: "a" as string is no longer reported as misleading. The rule now also reports a literal-pinning assertion such as false as false, matching the existing as const behavior.

... (truncated)

Commits

9e1999f chore: revert the revert
0b0fd8d chore: revert
0afa35a ci: release (#10817)
3447b2f feat(useDomQuerySelector): add ignore option (#10835)
e649198 ci: release (#10747)
4a32b63 feat(lint): add ignorePrimitives option to useNullishCoalescing (#10798)
f3d4c00 feat(js/nursery): add noSvelteNoUnnecessaryStateWrap rule (#10545)
f458028 feat(lint): add ignoreBooleanCoercion option to useNullishCoalescing (#10595)
ffe7d33 chore: revert
564d660 chore: revert
Additional commits viewable in compare view

Updates @types/node from 25.7.0 to 26.1.1

Commits

See full diff in compare view

Updates commitizen from 4.3.1 to 4.3.2

Release notes

Sourced from commitizen's releases.

v4.3.2

4.3.2 (2026-06-12)

chore(deps): bump semantic-release to 25 for npm trusted publishing (#1029) (6eb168c), closes #1029

ci(release): bump actions/checkout and actions/setup-node to v4 (#1024) (f5702c4), closes #1024

ci(release): use npm trusted publishing via OIDC (#1028) (096ed52), closes #1028

chore(deps) Update all non-major dependencies (#1026) (4e98218), closes #1026

chore(deps) Update dependency lodash to v4.18.1 [SECURITY] (#1010) (11be6a1), closes #1010

fix(ci): fix pipelines and update matrices to node 18/20/22 (#1023) (48e4b8b), closes #1023

docs: update README.md to add contributors (#985) (3c08866), closes #985

Commits

6eb168c chore(deps): bump semantic-release to 25 for npm trusted publishing (#1029)
096ed52 ci(release): use npm trusted publishing via OIDC (#1028)
4e98218 chore(deps) Update all non-major dependencies (#1026)
f5702c4 ci(release): bump actions/checkout and actions/setup-node to v4 (#1024)
11be6a1 chore(deps) Update dependency lodash to v4.18.1 [SECURITY] (#1010)
48e4b8b fix(ci): fix pipelines and update matrices to node 18/20/22 (#1023)
3c08866 docs: update README.md to add contributors (#985)
See full diff in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for commitizen since your current version.

Updates lint-staged from 17.0.4 to 17.0.8

Release notes

Sourced from lint-staged's releases.

v17.0.8

Patch Changes

#1809 179b437 - Fix lint-staged discarding the ongoing merge conflict status (.git/MERGE_HEAD) when using the --hide-unstaged or --hide-all options.

#1811 3d0b2c0 - Fix issues with Git commands that are successful but also emit warnings to stderr, by ignoring the stderr output completely when the process exits with code 0. This was the behavior when using nano-spawn and execa, but when switching to tinyexec in 16.3.0 both stdout and stderr were used as interleaved output.

v17.0.7

Patch Changes

#1806 e692e58 - Update dependency tinyexec@^1.2.4.

v17.0.6

Patch Changes

#1803 bdf2770 - Run all tests with Deno, in addition to Node.js and Bun.

#1796 7508272 - Fix performance regression of lint-staged v17 by going back to using git add to stage task modifications. This was changed to git update-index --again in v17 for less manual work, but unfortunately the update-index command gets slower in very large Git repos.

#1797 7b2505a - This version of lint-staged uses the new staged publishing for npm packages feature. Releases are already published from GitHub Actions with trusted publishing, but now an additional approval with two-factor authentication is also required.

#1802 321b0a9 - Downgrade dependency tinyexec@1.2.2 to avoid issues in version 1.2.3.

v17.0.5

Patch Changes

#1792 1f67271 - Correctly set the --max-arg-length default value based on the running platform. This controls how very long lists of staged files are split into multiple chunks.

Changelog

Sourced from lint-staged's changelog.

17.0.8

Patch Changes

#1809 179b437 - Fix lint-staged discarding the ongoing merge conflict status (.git/MERGE_HEAD) when using the --hide-unstaged or --hide-all options.

#1811 3d0b2c0 - Fix issues with Git commands that are successful but also emit warnings to stderr, by ignoring the stderr output completely when the process exits with code 0. This was the behavior when using nano-spawn and execa, but when switching to tinyexec in 16.3.0 both stdout and stderr were used as interleaved output.

17.0.7

Patch Changes

#1806 e692e58 - Update dependency tinyexec@^1.2.4.

17.0.6

Patch Changes

#1803 bdf2770 - Run all tests with Deno, in addition to Node.js and Bun.

#1796 7508272 - Fix performance regression of lint-staged v17 by going back to using git add to stage task modifications. This was changed to git update-index --again in v17 for less manual work, but unfortunately the update-index command gets slower in very large Git repos.

#1797 7b2505a - This version of lint-staged uses the new staged publishing for npm packages feature. Releases are already published from GitHub Actions with trusted publishing, but now an additional approval with two-factor authentication is also required.

#1802 321b0a9 - Downgrade dependency tinyexec@1.2.2 to avoid issues in version 1.2.3.

17.0.5

Patch Changes

#1792 1f67271 - Correctly set the --max-arg-length default value based on the running platform. This controls how very long lists of staged files are split into multiple chunks.

Commits

5f3b8f2 Merge pull request #1812 from lint-staged/changeset-release/main
43a9b8d chore(changeset): release
630e2f6 Merge pull request #1809 from lint-staged/restore-merge-status
179b437 fix: restore Git merge status after creating backup stash
6bae2e2 Merge pull request #1811 from lint-staged/exec-git-ignore-stderr
b82a830 ci: run npm audit omitting dev, including prod dependencies
0b19b80 build(deps): update dependencies
3d0b2c0 fix: ignore stderr when doing Git operations
cd11fec Merge pull request #1807 from lint-staged/changeset-release/main
15a8ee0 chore(changeset): release
Additional commits viewable in compare view

Updates playwright from 1.60.0 to 1.61.1

Release notes

Sourced from playwright's releases.

v1.61.1

Bug Fixes

#41365 [Bug]: Expect.Extend matcher with same name as default matcher in same expect instance overrides default matchers implementation to custom matcher

#41351 [Bug]: Playwright UI mode: apiRequestContext._wrapApiCall reports unexpected number of bytes (same test passes in headed mode)

#41360 [Bug]: Trace viewer: message times in websockets are downscaled by 1000

#41311 [Bug]: [Regression]: Sync loader throws "context.conditions?.includes is not a function" on Node 22.15

#41371 [Regression]: Sync ESM loader (registerHooks) fails to resolve extensionless .ts subpath imports across pnpm workspace symlinks

v1.61.0

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:
const context = await browser.newContext();
// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
id: credentialId,
userHandle,
privateKey,
publicKey,
});
await context.credentials.install();
const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.
You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:
await page.localStorage.setItem('token', 'abc');
const token = await page.localStorage.getItem('token');
const items = await page.sessionStorage.items();
New APIs

Network

apiResponse.securityDetails() and apiResponse.serverAddr() mirror the browser-side response.securityDetails() and response.serverAddr().

Browser and Screencast

... (truncated)

Commits

39e3553 cherry-pick(#41399): fix(test): load require-reached files as commonjs in syn...
4328122 chore: mark v1.61.1 (#41404)
2c29a94 fix(tracing): stop recording websocket frames outside of chunks (#41398)
4324b19 cherry-pick(#41367): fix(test): keep builtin expect matchers on base extend
041e7e3 cherry-pick(#41364): fix(har): WebSocket message timestamps should be in mi...
b8a0fc3 cherry-pick(#41309, #43149): Revert "fix(firefox): treat `navigationCommitted...
b5a3175 cherry-pick(#41319): fix(loader): support other node versions
d4724a9 cherry-pick(#41290): feat(docker): add Ubuntu 26.04 (Resolute Raccoon) image
1cc5a90 cherry-pick(#41295): chore: PLAYWRIGHT_TRACING_NO_WEBSOCKET_FRAMES and PLAYWR...
a6772bd cherry-pick(#41280): Revert "fix(trace-viewer): add keyboard navigation to `N...
Additional commits viewable in compare view

Updates preact from 10.29.1 to 10.29.7

Release notes

Sourced from preact's releases.

10.29.7

Maintenance

Make RTS optional peer dep (#5150, thanks @JoviDeCroock)

10.29.6

We had to revert preactjs/preact#5055 due to an incompatibility with useSignalEffect

10.29.5

Fixes

Compat Suspense hydration children recovery (#5144, thanks @JoviDeCroock)

10.29.4

Fixes

Fix hydration-suspense crashing due to sCU bail (#5134, thanks @JoviDeCroock)

Revert "Fix useId stability across async Suspense (#5108)" (#5135, thanks @JoviDeCroock)

10.29.3

Fixes

Fix error recovery for partially rendered subtrees (#5120, thanks @JoviDeCroock)

Fix useId stability across async Suspense (#5108, thanks @JoviDeCroock)

Flush subtree effects when rendering a pending node (#5055, thanks @JoviDeCroock)

Fix hydrate recovery with null excess DOM children (#5112, thanks @JoviDeCroock)

Performance

Address and guard memory leak hotspots (#5116, thanks @JoviDeCroock)

Avoid redundant allocations and writes (#5115, thanks @JoviDeCroock)

Types

Accept Signalish for input DOM-type (#5096, thanks @JoviDeCroock)

Maintenance

Use npm staged publishing (#5101, thanks @JoviDeCroock)

Add tier 3 sponsor logos (#5098, thanks @JoviDeCroock)

10.29.2

Fixes

Fix hydration when we have defaultValue or value on a textarea (#5081, thanks @JoviDeCroock)

Maintenance

Add CODEOWNERS for GitHub configuration (v10.x) (#5088, thanks @JoviDeCroock)

Fix trusted publishing workflow (#5084, thanks @JoviDeCroock)

... (truncated)

Commits

d7421ad Merge pull request #5152 from preactjs/10.29.7
ce79b96 10.29.7
a2418b8 Merge pull request #5150 from preactjs/preact-rts
58a2bb1 Make RTS optional peer dep
287288f Merge pull request #5149 from preactjs/10.29.6
fe8f16e 10.29.6
860b5a5 Merge pull request #5148 from preactjs/revert-5055-v10.x
1772956 Revert "Flush subtree effects (#5055)"
9110881 Merge pull request #5145 from preactjs/10.29.5
dc81cf3 10.29.5
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for preact since your current version.

Updates tsx from 4.21.0 to 4.23.0

Release notes

Sourced from tsx's releases.

v4.23.0

4.23.0 (2026-07-03)

Bug Fixes

avoid redundant filesystem probes during module resolution (257bbbb), closes privatenumber/tsx#809

Features

add multi-scenario startup benchmark suite (c178197), closes privatenumber/tsx#809 #809 hi#signal privatenumber/tsx#145 #809

This release is also available on:

npm package (@latest dist-tag)

v4.22.5

4.22.5 (2026-07-02)

Bug Fixes

isolate hook state per async module.register() registration (a305f36)

This release is also available on:

npm package (@latest dist-tag)

v4.22.4

4.22.4 (2026-05-31)

Bug Fixes

resolve CommonJS directory requires inside dependencies (#803) (1ce8463)

This release is also available on:

npm package (@latest dist-tag)

v4.22.3

4.22.3 (2026-05-19)

Bug Fixes

decode typed loader source (dce02fc)

preserve entrypoint with TypeScript preload hooks (68f72f3)

... (truncated)

Commits

1dfad37 docs: cite esbuild's extension-resolution model in node notes
257bbbb fix: avoid redundant filesystem probes during module resolution
c178197 feat: add multi-scenario startup benchmark suite
51800ac docs: add Node internals knowledge base (notes/node)
a305f36 fix: isolate hook state per async module.register() registration
ca501a9 chore: upgrade skills-npm to v1.2.0
596cd1f test: cover __dirname, __filename, & require.cache in CJS TS file
75d9bf0 test: lock in lenient ESM for ambiguous and CJS-typed packages
1472f3e test: cover ESM-syntax dependency with omitted "type" field
1ce8463 fix: resolve CommonJS directory requires inside dependencies (#803)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for tsx since your current version.

Updates turbo from 2.9.12 to 2.10.4

Release notes

Sourced from turbo's releases.

Turborepo v2.10.4

What's Changed

Changelog

release(turborepo): 2.10.3 by @github-actions[bot] in vercel/turborepo#13222

ci: Retry Windows nextest aborts from transient 0xc0000142 spawn failures by @anthonyshew in vercel/turborepo#13240

perf: Use mimalloc as the global allocator by @anthonyshew in vercel/turborepo#13237

perf: Parse yarn v1 lockfiles in a single pass by @anthonyshew in vercel/turborepo#13241

ci: Fix cache outputs for Eve app by @anthonyshew in vercel/turborepo#13243

perf: Stop materializing spans for the disabled daemon log layer by @anthonyshew in vercel/turborepo#13244

fix: Keep ancestor-scoped bun dependencies resolvable after prune renames by @anthonyshew in vercel/turborepo#13236

perf: Overlap external dependency hashing with package file hashing by @anthonyshew in vercel/turborepo#13234

perf: Build tracked repo index concurrently with package graph by @anthonyshew in vercel/turborepo#13232

perf: Release tokio runtime at exit so background DNS lookups never stall the user by @anthonyshew in vercel/turborepo#13231

perf: Overhaul pnpm lockfile parsing and dependency closure computation by @anthonyshew in vercel/turborepo#13228

feat: Add futureFlags.experimentalCargoWorkspaces flag (no-op) by @anthonyshew in vercel/turborepo#13227

feat: Introduce toolchain provider abstraction by @anthonyshew in vercel/turborepo#13235

perf: Parse Berry lockfiles in a single pass by @anthonyshew in vercel/turborepo#13242

fix: Apply input exclusion globs to the filesystem walk by @anthonyshew in vercel/turborepo#13224

fix: Stop root-directory packages from claiming every file in change mapping by @anthonyshew in vercel/turborepo#13225

chore: Rename turborepo-repository napi package to @turbo/repository by @anthonyshew in vercel/turborepo#13226

perf: Hash git blobs with hardware-accelerated SHA-1 by @anthonyshew in vercel/turborepo#13245

release(turborepo): 2.10.4-canary.1 by @github-actions[b...
Description has been truncated

…with 11 updates Bumps the monorepo-dependencies group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.15` | `2.5.3` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.7.0` | `26.1.1` | | [commitizen](https://github.com/commitizen/cz-cli) | `4.3.1` | `4.3.2` | | [lint-staged](https://github.com/lint-staged/lint-staged) | `17.0.4` | `17.0.8` | | [playwright](https://github.com/microsoft/playwright) | `1.60.0` | `1.61.1` | | [preact](https://github.com/preactjs/preact) | `10.29.1` | `10.29.7` | | [tsx](https://github.com/privatenumber/tsx) | `4.21.0` | `4.23.0` | | [turbo](https://github.com/vercel/turborepo) | `2.9.12` | `2.10.4` | | [typescript](https://github.com/microsoft/TypeScript) | `6.0.3` | `7.0.2` | | [preact-render-to-string](https://github.com/preactjs/preact-render-to-string) | `6.6.7` | `6.7.0` | | [es-module-lexer](https://github.com/guybedford/es-module-lexer) | `2.1.0` | `2.3.1` | Updates `@biomejs/biome` from 2.4.15 to 2.5.3 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.3/packages/@biomejs/biome) Updates `@types/node` from 25.7.0 to 26.1.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `commitizen` from 4.3.1 to 4.3.2 - [Release notes](https://github.com/commitizen/cz-cli/releases) - [Commits](commitizen/cz-cli@v4.3.1...v4.3.2) Updates `lint-staged` from 17.0.4 to 17.0.8 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v17.0.4...v17.0.8) Updates `playwright` from 1.60.0 to 1.61.1 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.60.0...v1.61.1) Updates `preact` from 10.29.1 to 10.29.7 - [Release notes](https://github.com/preactjs/preact/releases) - [Commits](preactjs/preact@10.29.1...10.29.7) Updates `tsx` from 4.21.0 to 4.23.0 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.21.0...v4.23.0) Updates `turbo` from 2.9.12 to 2.10.4 - [Release notes](https://github.com/vercel/turborepo/releases) - [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md) - [Commits](vercel/turborepo@v2.9.12...v2.10.4) Updates `typescript` from 6.0.3 to 7.0.2 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](https://github.com/microsoft/TypeScript/commits) Updates `preact-render-to-string` from 6.6.7 to 6.7.0 - [Release notes](https://github.com/preactjs/preact-render-to-string/releases) - [Changelog](https://github.com/preactjs/preact-render-to-string/blob/main/CHANGELOG.md) - [Commits](preactjs/preact-render-to-string@v6.6.7...v6.7.0) Updates `es-module-lexer` from 2.1.0 to 2.3.1 - [Release notes](https://github.com/guybedford/es-module-lexer/releases) - [Commits](guybedford/es-module-lexer@2.1.0...2.3.1) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.5.3 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: monorepo-dependencies - dependency-name: "@types/node" dependency-version: 26.1.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: monorepo-dependencies - dependency-name: commitizen dependency-version: 4.3.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: monorepo-dependencies - dependency-name: es-module-lexer dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: monorepo-dependencies - dependency-name: lint-staged dependency-version: 17.0.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: monorepo-dependencies - dependency-name: playwright dependency-version: 1.61.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: monorepo-dependencies - dependency-name: preact dependency-version: 10.29.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: monorepo-dependencies - dependency-name: preact-render-to-string dependency-version: 6.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: monorepo-dependencies - dependency-name: tsx dependency-version: 4.23.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: monorepo-dependencies - dependency-name: turbo dependency-version: 2.10.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: monorepo-dependencies - dependency-name: typescript dependency-version: 7.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: monorepo-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 10, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/monorepo-dependencies-e374628811 branch from 9e56e19 to 6773bdd Compare July 12, 2026 20:11

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the monorepo-dependencies group across 1 directory with 11 updates#23

chore(deps): bump the monorepo-dependencies group across 1 directory with 11 updates#23
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/monorepo-dependencies-e374628811

dependabot Bot commented on behalf of github Jul 10, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Biome CLI v2.5.3

2.5.3

Patch Changes

What's Changed

2.5.3

Patch Changes

2.5.2

Patch Changes

v4.3.2

4.3.2 (2026-06-12)

v17.0.8

Patch Changes

v17.0.7

Patch Changes

v17.0.6

Patch Changes

v17.0.5

Patch Changes

17.0.8

Patch Changes

17.0.7

Patch Changes

17.0.6

Patch Changes

17.0.5

Patch Changes

v1.61.1

Bug Fixes

v1.61.0

🔑 WebAuthn passkeys

🗃️ Web Storage

New APIs

Network

Browser and Screencast

10.29.7

Maintenance

10.29.6

10.29.5

Fixes

10.29.4

Fixes

10.29.3

Fixes

Performance

Types

Maintenance

10.29.2

Fixes

Maintenance

v4.23.0

4.23.0 (2026-07-03)

Bug Fixes

Features

v4.22.5

4.22.5 (2026-07-02)

Bug Fixes

v4.22.4

4.22.4 (2026-05-31)

Bug Fixes

v4.22.3

4.22.3 (2026-05-19)

Bug Fixes

Turborepo v2.10.4

What's Changed

Changelog

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 10, 2026 •

edited

Loading