⬆️ Bump the dependencies group with 4 updates

[dependabot]

Bumps the dependencies group with 4 updates: cosmiconfig, @biomejs/biome, @types/node and postcss.

Updates cosmiconfig from 9.0.0 to 9.0.1

Changelog

Sourced from cosmiconfig's changelog.

9.0.1

• Fixed a race condition where multiple instances existing simultaneously could cause cosmiconfig to fail to load TypeScript config files.
• Fixed an issue on Windows where CWD being a short path (e.g. C:\Users\USERNA~1) would cause cosmiconfig to fail to load ESM config files.

Commits

• 9a5cda3 9.0.1
• 2174017 update changelog
• 536d4a0 Prevent race conditions when running multiple instances of cosmiconfig and ...
• 4b48611 remove debug log
• 53d1745 remove more EOL node versions
• 7c1a1e3 replace resolve with realpath
• fcc9084 add additional path.resolve for windows short paths
• 7e995c8 debug
• 52b6b1c drop node 14 build as it seems to fail for unreachable reasons
• db45e38 fix tests on windows (3)
• Additional commits viewable in compare view

Updates @biomejs/biome from 2.4.4 to 2.4.6

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.4.6

2.4.6

Patch Changes

• #9305 40869b5 Thanks @​ematipico! - Fixed #4946: noUnreachable no longer reports code inside finally blocks as unreachable when there is a break, continue, or return in the corresponding try body.

• #9303 464910c Thanks @​ematipico! - Fixed #2786: The formatter no longer produces different output on subsequent runs when a case clause has a trailing line comment followed by a single block statement.

• #9324 6294aa2 Thanks @​arendjr! - Fixed [#7730](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/7730): useAnchorContent now recognises SolidJS's innerHTML the same way as React's dangerouslySetInnerHTML.

• #9298 1003229 Thanks @​Netail! - Fixed [#9296](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/9296), so comments are moved along with the attributes in the useSortedAttributes assist rule code fix.

• #9329 855b451 Thanks @​dyc3! - Improved performance of noEmptyBlockStatements. The rule is now smarter about short-circuiting its logic.

• #9326 85dfe9b Thanks @​dyc3! - Improved performance for noImportCycles by explicitly excluding node_modules from the cycle detection. The performance improvement is directly proportional to how big your dependency tree is.

• #9323 d5ee469 Thanks @​ematipico! - Fixed #9217 and biomejs/biome-vscode#959, where the Biome language server didn't correctly resolve the editor setting configurationPath when the provided value is a relative path.

• #9302 86fbc70 Thanks @​sepagian! - Fixed #9300: Lowercase component member expressions like <form.Field> in Svelte and Astro files are now correctly formatted.

  -<form .Field></form.Field>
  +<form.Field></form.Field>

What's Changed

• fix(js_analyze): move comments with useSortedAttributes action by @​Netail in biomejs/biome#9298
• fix(formatter): switch case comments by @​ematipico in biomejs/biome#9303
• refactor(markdown-parser): promote list structural tokens from skipped trivia to explicit CST nodes by @​jfmcdowell in biomejs/biome#9274
• fix(noUnreachable): handle dead implicit jumps in finally by @​ematipico in biomejs/biome#9305
• refactor(markdown-parser): align newline/prescan paragraph-break checks by @​jfmcdowell in biomejs/biome#9197
• refactor(markdown-parser): promote blank lines between list items to MdNewline nodes by @​jfmcdowell in biomejs/biome#9313
• fix(linter): support SolidJS's innerHTML in useAnchorContent by @​arendjr in biomejs/biome#9324
• fix(lsp): correctly resolve configurationPath by @​ematipico in biomejs/biome#9323
• perf(noImportCycles): exclude node_modules from cycle detection by @​dyc3 in biomejs/biome#9326
• refactor(css_parser): split function parser into modules by @​denbezrukov in biomejs/biome#9325
• refactor(markdown-parser): promote fenced code block skipped trivia to explicit CST nodes by @​jfmcdowell in biomejs/biome#9321
• refactor(css): rename operator_token field to operator by @​denbezrukov in biomejs/biome#9327
• perf: add .skip(1) to .ancestors() calls in a bunch of places by @​dyc3 in biomejs/biome#9330
• perf(noEmptyBlockStatements): short circuit to avoid traversing descendants for comments by @​dyc3 in biomejs/biome#9329
• fix: lowercase component member expressions in Astro/Svelte by @​sepagian in biomejs/biome#9302
• chore: align parser options struct name by @​Netail in biomejs/biome#9332
• feat(css): use ScssExpression in ScssNestingDeclaration and CssGenericProperty by @​denbezrukov in biomejs/biome#9328
• refactor(css): align scss expression node variants by @​denbezrukov in biomejs/biome#9340
• feat(css): use expression in page by @​denbezrukov in biomejs/biome#9342
• ci: release by @​github-actions[bot] in biomejs/biome#9301

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.4.6

Patch Changes

• #9305 40869b5 Thanks @​ematipico! - Fixed #4946: noUnreachable no longer reports code inside finally blocks as unreachable when there is a break, continue, or return in the corresponding try body.

• #9303 464910c Thanks @​ematipico! - Fixed #2786: The formatter no longer produces different output on subsequent runs when a case clause has a trailing line comment followed by a single block statement.

• #9324 6294aa2 Thanks @​arendjr! - Fixed [#7730](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/7730): useAnchorContent now recognises SolidJS's innerHTML the same way as React's dangerouslySetInnerHTML.

• #9298 1003229 Thanks @​Netail! - Fixed [#9296](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome/issues/9296), so comments are moved along with the attributes in the useSortedAttributes assist rule code fix.

• #9329 855b451 Thanks @​dyc3! - Improved performance of noEmptyBlockStatements. The rule is now smarter about short-circuiting its logic.

• #9326 85dfe9b Thanks @​dyc3! - Improved performance for noImportCycles by explicitly excluding node_modules from the cycle detection. The performance improvement is directly proportional to how big your dependency tree is.

• #9323 d5ee469 Thanks @​ematipico! - Fixed #9217 and biomejs/biome-vscode#959, where the Biome language server didn't correctly resolve the editor setting configurationPath when the provided value is a relative path.

• #9302 86fbc70 Thanks @​sepagian! - Fixed #9300: Lowercase component member expressions like <form.Field> in Svelte and Astro files are now correctly formatted.

  -<form .Field></form.Field>
  +<form.Field></form.Field>

2.4.5

Patch Changes

• #9185 e43e730 Thanks @​dyc3! - Added the nursery rule useVueScopedStyles for Vue SFCs. This rule enforces that <style> blocks have the scoped attribute (or module for CSS Modules), preventing style leakage and conflicts between components.

• #9184 49c8fde Thanks @​chocky335! - Improved plugin performance by batching all plugins into a single syntax visitor with a kind-to-plugin lookup map, reducing per-node dispatch overhead from O(N) to O(1) where N is the number of plugins.

• #9283 071c700 Thanks @​dyc3! - Fixed noUndeclaredVariables erroneously flagging functions and variables defined in the <script setup> section of Vue SFCs.

• #9221 4612133 Thanks @​ematipico! - Fixed an issue where the JSON reporter didn't contain the duration of the command.

• #9294 1805c8f Thanks @​Netail! - Extra rule source reference. biome migrate eslint should do a bit better detecting rules in your eslint configurations.

• #9178 101b3bb Thanks @​Bertie690! - Fixed #9172 and #9168: Biome now considers more constructs as valid test assertions.

  Previously, assert, expectTypeOf and assertType were not recognized as valid assertions by Biome's linting rules, producing false positives in lint/nursery/useExpect and other similar rules.

  Now, these rules will no longer produce errors in test cases that used these constructs instead of expect:

  import { expectTypeOf, assert, assertType } from "vitest";

... (truncated)

Commits

• cabc56c ci: release (#9301)
• 3bc07ab ci: release (#9188)
• 6b01778 feat(linter): add useUnicodeRegex rule (#8773)
• e43e730 feat(lint/html): add useVueScopedStyles (#9185)
• edf8bb6 feat(lint): add ||= to ??= detection in useNullishCoalescing (#9257)
• 9bbdf4d feat(lint): add nursery rule useNamedCaptureGroup (#9048)
• 1f2fe2e feat: prefer-array-some from eslint-plugin-unicorn (#9056)
• 1d2ca15 feat(lint): add useNullishCoalescing nursery rule (#8952)
• 101b3bb fix(lint): consider more constructs as valid test assertions (#9178)
• 3d0648f feat(biome_js_analyze): implement noVueRefAsOperand (#9063)
• See full diff in compare view

Updates @types/node from 25.3.3 to 25.3.5

Commits

• See full diff in compare view

Updates postcss from 8.5.6 to 8.5.8

Release notes

Sourced from postcss's releases.

8.5.8

• Fixed Processor#version.

8.5.7

• Improved source map annotation cleaning performance (by CodeAnt AI).

Changelog

Sourced from postcss's changelog.

8.5.8

• Fixed Processor#version.

8.5.7

• Improved source map annotation cleaning performance (by CodeAnt AI).

Commits

• 65de537 Release 8.5.8 version
• b2c6d97 Run git hook register
• 0ae0a49 Update Processor#version
• 6ee9f14 Release 8.5.7 version
• 3fbc951 Fix uvu Node.js 25 support
• 52db53e Update dependencies
• 497daef Speed up source map annotation cleaning by moving from RegExp
• 41e739a Remove banner
• 1329142 chore: speed up space-only string check in lib/parser.js (#2064)
• 23beff9 Update dependencies
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions