Skip to content

chore(deps): update all non-major dependencies #17

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
codepunkt merged 1 commit into from
Dec 25, 2025
Merged

chore(deps): update all non-major dependencies #17

codepunkt merged 1 commit into from
Dec 25, 2025

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Dec 15, 2025 •
edited
Loading

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@biomejs/biome (source) 2.3.8 -> 2.3.10 age confidence devDependencies patch
@prisma/adapter-pg (source) 7.1.0 -> 7.2.0 age confidence devDependencies minor
@release-it/conventional-changelog 10.0.2 -> 10.0.4 age confidence devDependencies patch
@types/node (source) 24.10.1 -> 24.10.4 age confidence devDependencies patch
@vitest/coverage-v8 (source) 4.0.15 -> 4.0.16 age confidence devDependencies patch
node (source) 24.11.1 -> 24.12.0 age confidence minor
pnpm (source) 10.24.0 -> 10.26.0 age confidence packageManager minor 10.26.2 (+1)
pnpm (source) 10.24.0 -> 10.26.0 age confidence uses-with minor 10.26.2 (+1)
prisma (source) 7.1.0 -> 7.2.0 age confidence devDependencies minor
release-it 19.0.6 -> 19.1.0 age confidence devDependencies minor 19.2.1 (+1)
vitest (source) 4.0.15 -> 4.0.16 age confidence devDependencies patch

Release Notes

biomejs/biome (@​biomejs/biome)

v2.3.10

Compare Source

Patch Changes
Invalid
<a>learn more</a>

v2.3.9

Compare Source

Patch Changes
Invalid
await "value";

const createValue = () => "value";
await createValue();
Caution

This is a first iteration of the rule, and does not yet detect generic "thenable" values.

  • #​8034 e7e0f6c Thanks @​Netail! - Added the nursery rule useRegexpExec. Enforce RegExp#exec over String#match if no global flag is provided.

  • #​8137 d407efb Thanks @​denbezrukov! - Reduced the internal memory used by the Biome formatter.

  • #​8281 30b046f Thanks @​tylersayshi! - Added the rule useRequiredScripts, which enforces presence of configurable entries in the scripts section of package.json files.

  • #​8290 d74c8bd Thanks @​dyc3! - The HTML formatter has been updated to match Prettier 3.7's behavior for handling <iframe>'s allow attribute.

    - <iframe allow="layout-animations 'none'; unoptimized-images 'none'; oversized-images 'none'; sync-script 'none'; sync-xhr 'none'; unsized-media 'none';"></iframe>
+ <iframe
+ 	allow="
+ 		layout-animations 'none';
+ 		unoptimized-images 'none';
+ 		oversized-images 'none';
+ 		sync-script 'none';
+ 		sync-xhr 'none';
+ 		unsized-media 'none';
+ 	"
+ ></iframe>

  • #​8302 d1d5014 Thanks @​mlafeldt! - Fixed #​8109: return statements in Astro frontmatter no longer trigger "Illegal return statement" errors when using experimentalFullSupportEnabled.

  • #​8346 f3aee1a Thanks @​arendjr! - Fixed #​8292: Implement tracking
    of types of TypeScript constructor parameter properties.

    This resolves certain false negatives in noFloatingPromises and other typed
    rules.

Example
class AsyncClass {
  async returnsPromise() {
    return "value";
  }
}

class ShouldBeReported {
  constructor(public field: AsyncClass) {}
  //          ^^^^^^^^^^^^----------------- Parameter property declaration

  async shouldBeReported() {
    // `noFloatingPromises` will now report the following usage:
    this.field.returnsPromise();
  }
}

  • #​8326 153e3c6 Thanks @​ematipico! - Improved the rule noBiomeFirstException. The rule can now inspect if extended configurations already contain the catch-all ** inside files.includes and, if so, the rule suggests removing ** from the user configuration.

  • #​8433 397547a Thanks @​dyc3! - Fixed #​7920: The CSS parser, with Tailwind directives enabled, will no longer error when you use things like prefix(tw) in @import at rules.

  • #​8378 cc2a62e Thanks @​Bertie690! - Clarify diagnostic message for lint/style/useUnifiedTypeSignatures

    The rule's diagnostic message now clearly states that multiple similar overload signatures are hard to read & maintain, as opposed to overload signatures in general.

  • #​8296 9d3ef10 Thanks @​dyc3! - biome rage now shows if you have experimental HTML full support enabled.

  • #​8414 09acf2a Thanks @​Bertie690! - Updated the documentation & diagnostic message for lint/nursery/noProto, mentioning the reasons for its longstanding deprecation and why more modern alternatives are preferred.

    Notably, the rule clearly states that using __proto__ inside object literal definitions is still allowed, being a standard way to set the prototype of a newly created object.

  • #​8445 c3df0e0 Thanks @​tt-a1i! - Fix --changed and --staged flags throwing "No such file or directory" error when a file has been deleted or renamed in the working directory. The CLI now filters out files that no longer exist before processing.

  • #​8459 b17d12b Thanks @​ruidosujeira! - Fix #​8435: resolved false positive in noUnusedVariables for generic type parameters in construct signature type members (new <T>(): T).

  • #​8439 a78774b Thanks @​tt-a1i! - Fixed #​8011: useConsistentCurlyBraces no longer suggests removing curly braces from JSX expression children containing characters that would cause parsing issues or semantic changes when converted to plain JSX text ({, }, <, >, &).

  • #​8436 a392c06 Thanks @​ruidosujeira! - Fixed #​8429. Formatter, linter, and assist settings now correctly inherit from global configuration when not explicitly specified in overrides.

    Before this fix, when an override specified only one feature (e.g., only linter), other features would be incorrectly disabled instead of inheriting from global settings.

    Example configuration that now works correctly:

    {
  "formatter": { "enabled": true },
  "overrides": [
    {
      "includes": ["*.vue"],
      "linter": { "enabled": false }
    }
  ]
}

    After this fix, .vue files will have the linter disabled (as specified in the override) but the formatter enabled (inherited from global settings).

  • #​8411 9f1b3b0 Thanks @​rriski! - Properly handle name, type_arguments, and attributes slots for JsxOpeningElement and JsxSelfClosingElement GritQL patterns.

    The following biome search commands no longer throw errors:

    biome search 'JsxOpeningElement(name = $elem_name) where { $elem_name <: "div" }'
biome search 'JsxSelfClosingElement(name = $elem_name) where { $elem_name <: "div" }'

  • #​8441 cf37d0d Thanks @​tt-a1i! - Fixed #​6577: noUselessUndefined no longer reports () => undefined in arrow function expression bodies. Previously, the rule would flag this pattern and suggest replacing it with () => {}, which conflicts with the noEmptyBlockStatements rule.

  • #​8444 8caa7a0 Thanks @​tt-a1i! - Fix noUnknownMediaFeatureName false positive for prefers-reduced-transparency media feature. The feature name was misspelled as prefers-reduded-transparency in the keywords list.

  • #​8443 c3fa5a1 Thanks @​tt-a1i! - Fix useGenericFontNames false positive when a CSS variable is used as the last value in font-family or font. The rule now correctly ignores cases like font-family: "Noto Serif", var(--serif) and font: 1em Arial, var(--fallback).

  • #​8281 30b046f Thanks @​tylersayshi! - Fixed noDuplicateDependencies incorrectly triggering on files like _package.json.

  • #​8315 c7915c4 Thanks @​hirokiokada77! - Fixed #​5213: The noDoneCallback rule no longer flags false positives when a method is called on a regular variable bound to identifiers such as before, after, beforeEach, and afterEach.

  • #​8398 204844f Thanks @​Bertie690! - The default value of the ignoreRestSiblings option for noUnusedVariables'
    has been reverted to its prior value of true after an internal refactor accidentally changed it.

    The diagnostic message has also been tweaked for readability.

  • #​8242 9694e37 Thanks @​dyc3! - Fixed bugs in the HTML parser so that it will flag invalid shorthand syntaxes instead of silently accepting them. For example, <Foo : foo="5" /> is now invalid because there is a space after the :.

  • #​8297 efa694c Thanks @​Yonom! - Added support for negative value utilities in useSortedClasses. Negative value utilities such as -ml-2 or -top-4 are now recognized and sorted correctly alongside their positive counterparts.

    // Now detected as unsorted:
<div class="-ml-2 p-4 -mt-1" />
// Suggested fix:
<div class="-mt-1 -ml-2 p-4" />

  • #​8335 3710702 Thanks @​dibashthapa! - Added the new nursery rule useDestructuring. This rule helps to encourage destructuring from arrays and objects.

    For example, the following code triggers because the variable name x matches the property foo.x, making it ideal for object destructuring syntax.

    var x = foo.x;

  • #​8383 59b2f9a Thanks @​ematipico! - Fixed #​7927: noExtraNonNullAssertion incorrectly flagged separate non-null assertions on both sides of an assignment.

    The rule now correctly distinguishes between nested non-null assertions (still flagged) and separate non-null assertions on different sides of an assignment (allowed).

Examples
Valid (now allowed)
arr[0]! ^= arr[1]!;
Invalid (still flagged)
arr[0]!! ^= arr[1];
arr[0] ^= arr[1]!!;

  • #​8401 382786b Thanks @​Bertie690! - useExhaustiveDependencies now correctly validates custom hooks whose dependency arrays come before their callbacks.

    Previously, a logical error caused the rule to be unable to detect dependency arrays placed before hook callbacks, producing spurious errors and blocking further diagnostics.

    {
  "linter": {
    "rules": {
      "correctness": {
        "useExhaustiveDependencies": {
          "level": "error",
          "options": {
            "hooks": [
              {
                "name": "doSomething",
                "closureIndex": 2,
                "dependenciesIndex": 0
              }
            ]
          }
        }
      }
    }
  }
}
    function component() {
  let thing = 5;
  // The rule will now correctly recognize `thing` as being specified
  // instead of erroring due to "missing" dependency arrays
  doSomething([thing], "blah", () => {
    console.log(thing);
  });
}

    The rule documentation & diagnostic messages have also been reworked for improved clarity.

  • #​8365 8f36051 Thanks @​JacquesLeupin! - Fixed #​8360: GritQL plugins defined in child configurations with extends: "//" now work correctly.

  • #​8306 8de2774 Thanks @​dibashthapa! - Fixed #​8288: Fixed the issue with false positive errors

    This new change will ignore attribute and only show diagnostics for JSX Expressions

    For example

    Valid:

    <Something checked={isOpen && items.length} />

    Invalid:

    const Component = () => {
  return isOpen && items.length;
};

  • #​8356 f9673fc Thanks @​ematipico! - Fixed #​7917, where Biome removed the styles contained in a <style lang="scss">, when experimentalFullSupportEnabled is enabled.

  • #​8371 d71924e Thanks @​ematipico! - Fixed #​7343, where Biome failed to resolve extended configurations from parent directories using relative paths.

  • #​8404 6a221f9 Thanks @​fireairforce! - Fixed #​7826, where a class member named async will not cause the parse error.

  • #​8249 893e36c Thanks @​cormacrelf! - Addressed #​7538. Reduced the
    volume of logging from the LSP server.

    Use biome clean to remove large logs.

  • #​8303 db2c65b Thanks @​hirokiokada77! - Fixed #​8300: noUnusedImports now detects JSDoc tags on object properties.

    import type LinkOnObjectProperty from "mod";

const testLinkOnObjectProperty = {
	/**
	 * {@&#8203;link LinkOnObjectProperty}
	 */
	property: 0,
};

  • #​8328 9cf2332 Thanks @​Netail! - Corrected rule source reference. biome migrate eslint should do a bit better detecting rules in your eslint configurations.

  • #​8403 c96dcf2 Thanks @​dyc3! - Fixed #​8340: noUnknownProperty will no longer flag anything in @plugin when the parser option tailwindDirectives is enabled

  • #​8284 4976d1b Thanks @​denbezrukov! - Improved the performance of the Biome Formatter by enabling the internal source maps only when needed.

  • #​8260 a226b28 Thanks @​ho991217! - Fixed biome-vscode#817: Biome now updates documents when the textDocument/didSave notification is received.

  • #​8183 b064786 Thanks @​hornta! - Fixed #​8179: The useConsistentArrowReturn rule now correctly handles multiline expressions in its autofix when the style option is set to "always".

    Previously, the autofix would incorrectly place a newline after the return keyword, causing unexpected behavior.

    Example:

    const foo = (l) => l.split("\n");

    Now correctly autofixes to:

    const foo = (l) => {
-   return
-   l.split('\n');
+   return l.split('\n');
}

  • #​8382 7409cba Thanks @​fireairforce! - Fixed #​8338: Ignored the noUnknownTypeSelector check when the root selector is used under View Transition pseudo-elements.

    Example

    ::view-transition-old(root),
::view-transition-new(root) {
  z-index: 1;
}

  • #​7513 e039f3b Thanks @​AsherDe! - Added the nursery rule noVueSetupPropsReactivityLoss.

    This new rule disallows usages that cause the reactivity of props passed to the setup function to be lost.

    Invalid code example:

    export default {
  setup({ count }) {
    // `count` is no longer reactive here.
    return () => h("div", count);
  },
};
prisma/prisma (@​prisma/adapter-pg)

v7.2.0

Compare Source

Today, we are excited to share the 7.2.0 stable release 🎉

🌟 Star this repo for notifications about new releases, bug fixes & features — or follow us on X!

Highlights

ORM

  • #​28830: feat: add sqlcommenter-query-insights plugin
    • Adds a new SQL commenter plugin to support query insights metadata.
  • #​28860: feat(migrate): add -url param for db pull, db push, migrate dev
    • Adds a -url flag to key migrate commands to make connection configuration more flexible.
  • #​28895: feat(config): allow undefined URLs in e.g. prisma generate
    • Allows certain workflows (such as prisma generate) to proceed even when URLs are undefined.
  • #​28903: feat(cli): customize prisma init based on the JS runtime (Bun vs others)
    • Makes prisma init tailor generated setup depending on whether the runtime is Bun or another JavaScript runtime.
  • #​28846: fix(client-engine-runtime): make DataMapperError a UserFacingError
    • Ensures DataMapperError is surfaced as a user-facing error for clearer, more actionable error reporting.
  • #​28849: fix(adapter-{pg,neon,ppg}): handle 22P02 error in Postgres
    • Improves Postgres adapter error handling for invalid-text-representation errors (22P02).
  • #​28913: fix: fix byte upserts by removing legacy byte array representation
    • Fixes byte upsert behavior by removing a legacy byte-array representation path.
  • #​28535: fix(client,internals,migrate,generator-helper): handle multibyte UTF-8 characters split across chunk boundaries in byline
    • Prevents issues when multibyte UTF-8 characters are split across chunk boundaries during line processing.
  • #​28911: fix(cli): make prisma version --json emit JSON only to stdout
    • Ensures machine-readable JSON output is emitted cleanly to stdout without extra noise.

VS Code Extension

  • #​1950: fix: TML-1670 studio connections
    • Resolves issues related to Studio connections, improving reliability for VS Code or language-server integrations.

Open roles at Prisma

Interested in joining Prisma? We’re growing and have several exciting opportunities across the company for developers who are passionate about building with Prisma. Explore our open positions on our [Careers page](https://www.prisma.io/careers#current) and find the role that’s right for you.

Enterprise support

Thousands of teams use Prisma and many of them already tap into our Enterprise & Agency Support Program for hands-on help with everything from schema integrations and performance tuning to security and compliance.

With this program you also get priority issue triage and bug fixes, expert scalability advice, and custom training so that your Prisma-powered apps stay rock-solid at any scale. Learn more or join: https://prisma.io/enterprise.

release-it/conventional-changelog (@​release-it/conventional-changelog)

v10.0.4

Compare Source

v10.0.3

Compare Source

vitest-dev/vitest (@​vitest/coverage-v8)

v4.0.16

Compare Source

   🐞 Bug Fixes
    View changes on GitHub
nodejs/node (node)

v24.12.0: 2025-12-10, Version 24.12.0 'Krypton' (LTS), @​targos

Compare Source

Notable Changes
  • [1a00b5f68a] - (SEMVER-MINOR) http: add optimizeEmptyRequests server option (Rafael Gonzaga) #​59778
  • [ff5754077d] - (SEMVER-MINOR) lib: add options to util.deprecate (Rafael Gonzaga) #​59982
  • [8987159234] - (SEMVER-MINOR) module: mark type stripping as stable (Marco Ippolito) #​60600
  • [92c484ebf4] - (SEMVER-MINOR) node-api: add napi_create_object_with_properties (Miguel Marcondes Filho) #​59953
  • [b11bc5984e] - (SEMVER-MINOR) sqlite: allow setting defensive flag (Bart Louwers) #​60217
  • [e7da5b4b7d] - (SEMVER-MINOR) src: add watch config namespace (Marco Ippolito) #​60178
  • [a7f7d10c06] - (SEMVER-MINOR) src: add an option to make compile cache portable (Aditi) #​58797
  • [92ea669240] - (SEMVER-MINOR) src,permission: add --allow-inspector ability (Rafael Gonzaga) #​59711
  • [05d7509bd2] - (SEMVER-MINOR) v8: add cpu profile (theanarkh) #​59807
Commits

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@coderabbitai
Copy link

coderabbitai bot commented Dec 15, 2025 •
edited
Loading

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Note

.coderabbit.yaml has unrecognized properties

CodeRabbit is using all valid settings from your configuration. Unrecognized properties (listed below) have been ignored and may indicate typos or deprecated fields that can be removed.

⚠️ Parsing warnings (1) 
Validation error: Unrecognized key(s) in object: 'review'
⚙️ Configuration instructions
  • Please see the configuration documentation for more information.
  • You can also validate your configuration using the online YAML validator.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Comment @coderabbitai help to get the list of available commands and usage tips.

@codecov-commenter
Copy link

codecov-commenter commented Dec 15, 2025 •
edited
Loading

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (db733f9) to head (b52b5d7).

Additional details and impacted files 
@@            Coverage Diff            @@
##              main       #17   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            2         2           
  Lines           56        56           
  Branches         6         6           
=========================================
  Hits            56        56

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 318881a to 41dd894 Compare December 16, 2025 02:55
@renovate renovate bot changed the title chore(deps): update pnpm to v10.25.0 chore(deps): update all non-major dependencies Dec 16, 2025
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from cde124d to 5936292 Compare December 23, 2025 20:51
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 5936292 to 2523e1f Compare December 24, 2025 16:46
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 2523e1f to b52b5d7 Compare December 25, 2025 17:42
@codepunkt codepunkt merged commit 6db91e2 into main Dec 25, 2025
5 checks passed
@codepunkt codepunkt deleted the renovate/all-minor-patch branch December 25, 2025 17:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@codecov-commenter @codepunkt