chore(deps): Bump @biomejs/biome from 2.4.15 to 2.5.0 in /apps/frontend by dependabot[bot] · Pull Request #346 · OBenner/Auto-Coding

dependabot · 2026-06-14T23:07:12Z

Bumps @biomejs/biome from 2.4.15 to 2.5.0.

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.5.0

2.5.0

Minor Changes
#9539 f0615fd Thanks @ematipico! - Added a new reporter called concise. When --reporter=concise is passed the commands format, lint, check and ci, the diagnostics are printed in a compact manner:
! index.ts:2:10: lint/correctness/noUnusedImports: Several of these imports are unused.
! main.ts:9:7: lint/correctness/noUnusedVariables: This variable f is unused.
× index.ts:8:5: lint/suspicious/noImplicitAnyLet: This variable implicitly has the any type.
× main.ts:2:10: lint/suspicious/noRedeclare: Shouldn't redeclare 'z'. Consider to delete it or rename it.
#9495 2056b23 Thanks @aviraldua93! - Added the useKeyWithClickEvents a11y lint rule for HTML files (.html, .vue, .svelte, .astro). This is a port of the existing JSX rule. The rule enforces that elements with an onclick handler also have at least one keyboard event handler (onkeydown, onkeyup, or onkeypress) to ensure keyboard accessibility.

Inherently keyboard-accessible elements (<a>, <button>, <input>, <select>, <textarea>, <option>) are excluded, as are elements hidden from assistive technologies (aria-hidden) or with role="presentation" / role="none".

<div onclick="handleClick()">Click me</div>

<div onclick="handleClick()" onkeydown="handleKeyDown()">Click me</div>

<button onclick="handleClick()">Submit</button>
#9152 9ec8500 Thanks @ematipico! - Added new nursery lint rule noUndeclaredClasses for HTML, JSX, and SFC files (Vue, Astro, Svelte). The rule detects CSS class names used in class="..." (or className) attributes that are not defined in any <style> block or linked stylesheet reachable from the file.

<html>
  <head>
    <style>
      .button {
        color: blue;
      }
    </style>
  </head>
  <body>
    <div class="button typo"></div>
  </body>
</html>
#9152 9ec8500 Thanks @ematipico! - Added new nursery lint rule noUnusedClasses for CSS. The rule detects CSS class selectors that are never referenced in any HTML or JSX file that imports the stylesheet. This is a project-domain rule that requires the module graph.

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.5.0

Minor Changes
#9539 f0615fd Thanks @ematipico! - Added a new reporter called concise. When --reporter=concise is passed the commands format, lint, check and ci, the diagnostics are printed in a compact manner:
! index.ts:2:10: lint/correctness/noUnusedImports: Several of these imports are unused.
! main.ts:9:7: lint/correctness/noUnusedVariables: This variable f is unused.
× index.ts:8:5: lint/suspicious/noImplicitAnyLet: This variable implicitly has the any type.
× main.ts:2:10: lint/suspicious/noRedeclare: Shouldn't redeclare 'z'. Consider to delete it or rename it.
#9495 2056b23 Thanks @aviraldua93! - Added the useKeyWithClickEvents a11y lint rule for HTML files (.html, .vue, .svelte, .astro). This is a port of the existing JSX rule. The rule enforces that elements with an onclick handler also have at least one keyboard event handler (onkeydown, onkeyup, or onkeypress) to ensure keyboard accessibility.

Inherently keyboard-accessible elements (<a>, <button>, <input>, <select>, <textarea>, <option>) are excluded, as are elements hidden from assistive technologies (aria-hidden) or with role="presentation" / role="none".

<div onclick="handleClick()">Click me</div>

<div onclick="handleClick()" onkeydown="handleKeyDown()">Click me</div>

<button onclick="handleClick()">Submit</button>
#9152 9ec8500 Thanks @ematipico! - Added new nursery lint rule noUndeclaredClasses for HTML, JSX, and SFC files (Vue, Astro, Svelte). The rule detects CSS class names used in class="..." (or className) attributes that are not defined in any <style> block or linked stylesheet reachable from the file.

<html>
  <head>
    <style>
      .button {
        color: blue;
      }
    </style>
  </head>
  <body>
    <div class="button typo"></div>
  </body>
</html>
#9152 9ec8500 Thanks @ematipico! - Added new nursery lint rule noUnusedClasses for CSS. The rule detects CSS class selectors that are never referenced in any HTML or JSX file that imports the stylesheet. This is a project-domain rule that requires the module graph.
/* styles.css — .ghost is never used in any importing file */

... (truncated)

Commits

c0b9832 ci: release (#10499)
995c1ff feat(lint): add useFunctionComponentDefinition rule (#10498)
311c2b2 fix(biome_configuration): avoid Markdown links in JSON schema descriptions (#...
04c3f19 fix: docs and readme (#10584)
961f41c refactor(useExportType): improve docs and code (#10569)
78075b7 feat(useExportType): add style option (#10561)
6642895 feat: rule promotion for v2.5 (#10562)
9a5855e feat: noRestrictedDependencies (#10467)
608a62f Merge branch 'main' into chore/merge-main-into-next
0f29b83 feat(linter): implement useIncludes rule (#10516)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) from 2.4.15 to 2.5.0. - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.0/packages/@biomejs/biome) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.5.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-06-14T23:07:28Z

🎉 Thanks for your first PR!

A maintainer will review it soon. Please make sure:

Your branch is synced with develop
CI checks pass
You've followed our contribution guide

Welcome to the Auto Code community!

OBenner · 2026-06-24T09:21:10Z

Superseded by #349, which combines all open dependency updates into a single PR. Closing in favor of that.

dependabot · 2026-06-24T09:21:14Z

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

sonarqubecloud · 2026-06-24T09:22:53Z

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Consolidates the open chore(deps) Dependabot PRs. npm manifests were edited to their target versions and the root lockfile regenerated from develop's baseline so its hoisting layout is preserved (the frontend CI relies on it). Python — apps/backend/requirements.txt (floors already installed in the venv; QA suites green): - claude-agent-sdk >=0.1.19 -> >=0.2.87 (#301) - real_ladybug >=0.13.0 -> >=0.15.3 (#302) - pandas >=3.0.2 -> >=3.0.3 (#299) - psutil >=5.9.0 -> >=7.2.2 (#298) - tiktoken >=0.12.0 -> >=0.13.0 (#303) npm — apps/frontend/package.json + package-lock.json: - electron ^41.3.0 -> ^42.4.0 (#344) - @anthropic-ai/sdk ^0.95.1 -> ^0.104.1 (#345) - @biomejs/biome 2.4.15 -> 2.5.0 (#346) - vite ^8.0.11 -> ^8.0.16 (#347) - react-router-dom ^7.13.0 -> ^7.17.0 (#327, apps/web-frontend) - hono (transitive) 4.12.18 -> 4.12.27 (#328, via overrides) .design-system (taken verbatim from the Dependabot branch): - @vitejs/plugin-react ^5.1.2 -> ^5.2.0, vite ^7.3.3 -> ^8.0.16, esbuild (#343) Held back — the vitest bump (#310, 4.0.x -> 4.1.0) and apps/web-frontend's vite 7 -> 8 bump. Combined, they make npm nest vitest under apps/frontend instead of hoisting it to the root node_modules (electron-vite pins root vite to <=7, and vitest 4.1 needs vite 8). The frontend CI (setup-node-frontend) deletes apps/frontend/node_modules and symlinks it to root, so a nested vitest vanishes and `tsc --noEmit` fails with "Cannot find module 'vitest'". Kept at develop's versions so vitest stays hoisted at root; Dependabot will re-propose these once electron-vite supports vite 8. Verified locally: npm ci --ignore-scripts + the CI symlink step + tsc --noEmit pass, and the frontend vitest suite is green (3868 passed). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Signed-off-by: Oleg Miagkov <mrobenner@gmail.com>

* chore(deps): combine Dependabot dependency updates into one PR Consolidates the open chore(deps) Dependabot PRs. npm manifests were edited to their target versions and the root lockfile regenerated from develop's baseline so its hoisting layout is preserved (the frontend CI relies on it). Python — apps/backend/requirements.txt (floors already installed in the venv; QA suites green): - claude-agent-sdk >=0.1.19 -> >=0.2.87 (#301) - real_ladybug >=0.13.0 -> >=0.15.3 (#302) - pandas >=3.0.2 -> >=3.0.3 (#299) - psutil >=5.9.0 -> >=7.2.2 (#298) - tiktoken >=0.12.0 -> >=0.13.0 (#303) npm — apps/frontend/package.json + package-lock.json: - electron ^41.3.0 -> ^42.4.0 (#344) - @anthropic-ai/sdk ^0.95.1 -> ^0.104.1 (#345) - @biomejs/biome 2.4.15 -> 2.5.0 (#346) - vite ^8.0.11 -> ^8.0.16 (#347) - react-router-dom ^7.13.0 -> ^7.17.0 (#327, apps/web-frontend) - hono (transitive) 4.12.18 -> 4.12.27 (#328, via overrides) .design-system (taken verbatim from the Dependabot branch): - @vitejs/plugin-react ^5.1.2 -> ^5.2.0, vite ^7.3.3 -> ^8.0.16, esbuild (#343) Held back — the vitest bump (#310, 4.0.x -> 4.1.0) and apps/web-frontend's vite 7 -> 8 bump. Combined, they make npm nest vitest under apps/frontend instead of hoisting it to the root node_modules (electron-vite pins root vite to <=7, and vitest 4.1 needs vite 8). The frontend CI (setup-node-frontend) deletes apps/frontend/node_modules and symlinks it to root, so a nested vitest vanishes and `tsc --noEmit` fails with "Cannot find module 'vitest'". Kept at develop's versions so vitest stays hoisted at root; Dependabot will re-propose these once electron-vite supports vite 8. Verified locally: npm ci --ignore-scripts + the CI symlink step + tsc --noEmit pass, and the frontend vitest suite is green (3868 passed). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Signed-off-by: Oleg Miagkov <mrobenner@gmail.com> * ci(deps): bump GitHub Actions versions - azure/trusted-signing-action v1.2.0 -> v2.0.0 (#297; release.yml + beta-release.yml) - peter-evans/create-pull-request v6.1.0 -> v8.1.1 (#300; nightly-provider-autonomy.yml) - codecov/codecov-action v6 -> v7 (#312; ci.yml) Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Signed-off-by: Oleg Miagkov <mrobenner@gmail.com> --------- Signed-off-by: Oleg Miagkov <mrobenner@gmail.com> Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 14, 2026

dependabot Bot mentioned this pull request Jun 14, 2026

chore(deps): Bump @biomejs/biome from 2.4.15 to 2.4.16 in /apps/frontend #304

Closed

github-actions Bot added area/frontend chore size/XS labels Jun 14, 2026

OBenner mentioned this pull request Jun 18, 2026

chore(deps): combine Dependabot dependency updates into one PR #349

Merged

OBenner closed this Jun 24, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/apps/frontend/biomejs/biome-2.5.0 branch June 24, 2026 09:21

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): Bump @biomejs/biome from 2.4.15 to 2.5.0 in /apps/frontend#346

chore(deps): Bump @biomejs/biome from 2.4.15 to 2.5.0 in /apps/frontend#346
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/npm_and_yarn/apps/frontend/biomejs/biome-2.5.0

dependabot Bot commented on behalf of github Jun 14, 2026

Uh oh!

github-actions Bot commented Jun 14, 2026

Uh oh!

OBenner commented Jun 24, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 24, 2026

Uh oh!

sonarqubecloud Bot commented Jun 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jun 14, 2026

Biome CLI v2.5.0

2.5.0

Minor Changes

2.5.0

Minor Changes

Uh oh!

github-actions Bot commented Jun 14, 2026

Uh oh!

OBenner commented Jun 24, 2026

Uh oh!

dependabot Bot commented on behalf of github Jun 24, 2026

Uh oh!

sonarqubecloud Bot commented Jun 24, 2026

Quality Gate passed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant