Skip to content

build: bump the dependencies group with 4 updates#58

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-d6484aba67
Open

build: bump the dependencies group with 4 updates#58
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dependencies-d6484aba67

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 4 updates: @biomejs/biome, @types/node, @vercel/node and vercel.

Updates @biomejs/biome from 2.4.15 to 2.5.1

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.1

2.5.1

Patch Changes

  • #10722 f8a303d Thanks @​denbezrukov! - Fixed CSS formatter output for comments between import media queries.

    -@import url("print.css") print,
    -/* comment */
    -screen;
    +@import url("print.css") print, /* comment */ screen;
  • #10738 9fdc560 Thanks @​JamBalaya56562! - Fixed #9899: the json and json-pretty reporters now escape backslashes in a diagnostic's location.path. Previously, paths containing backslashes (such as Windows-style paths) were emitted unescaped, producing invalid JSON.

    -    "path": "src\account\setup-passkey.tsx",
    +    "path": "src\\account\\setup-passkey.tsx",
  • #10626 5f837df Thanks @​tom-groves! - Fixed #10625: biome migrate no longer emits an invalid trailing comma when a renamed rule (such as noConsoleLognoConsole) is the last member of its rule group. Previously this produced malformed output that aborted the migration of a strict-JSON biome.json with a parsing error.

  • #10535 c245f9d Thanks @​Mokto! - Fixed a false positive in noUnusedVariables for Svelte files where variables referenced inside {@html expr} blocks were incorrectly reported as unused.

  • #10668 a0f197e Thanks @​Netail! - The biome init command has been updated to include a more up-to-date URL to the first-party extensions page.

  • #10667 d8c3e87 Thanks @​Netail! - Fixed #10664: useErrorCause now correctly detects a shorthand property.

  • #10696 ef2373f Thanks @​ematipico! - Fixed #9566. Improved how the Biome Language Server loads multiple configuration files inside a workspace.

  • #10705 4ccb410 Thanks @​ematipico! - Fixed #10652. Biome plugins are now properly filtered when using --only and --skip flags.

  • #10669 aa0a6eb Thanks @​Netail! - Fixed #10651: useInlineScriptId now correctly trims trivia to detect if an id attribute has been set.

  • #10689 844b1be Thanks @​ematipico! - Fixed #10658. The issue was caused by the "Go-to definition" editor feature, which was enabled by default. The feature is now disabled by default. To work, the feature triggers the scanner to build the module graph. This caused memory leak issues in cases where Biome starts in the home directory to modify files.

    If you relied on this new feature, you must now turn on using the [editor settings] of the extension e.g. Zed and VSCode.

  • #10695 043fbb5 Thanks @​ematipico! - Fixed #10674. Biome now throws an error when the field level is missing from a rule option.

  • #10712 5941df2 Thanks @​Conaclos! - Improved the diagnostic and the documentation of useFlatMap.

  • #10615 23814f1 Thanks @​qwertycxz! - Improved the DX the JSON schema when it's used by certain code editors like VSCode.

  • #10688 ec69489 Thanks @​ematipico! - Fixed a bug where the Biome Daemon did not correctly shut down when the editor was closed during an in-progress operation, especially while scanning.

  • #10701 6c2e0d7 Thanks @​ematipico! - Fixed #10694. The Biome Language Server no longer prints an error when the user hovers a variable imported from node_modules.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.1

Patch Changes

  • #10722 f8a303d Thanks @​denbezrukov! - Fixed CSS formatter output for comments between import media queries.

    -@import url("print.css") print,
    -/* comment */
    -screen;
    +@import url("print.css") print, /* comment */ screen;
  • #10738 9fdc560 Thanks @​JamBalaya56562! - Fixed #9899: the json and json-pretty reporters now escape backslashes in a diagnostic's location.path. Previously, paths containing backslashes (such as Windows-style paths) were emitted unescaped, producing invalid JSON.

    -    "path": "src\account\setup-passkey.tsx",
    +    "path": "src\\account\\setup-passkey.tsx",
  • #10626 5f837df Thanks @​tom-groves! - Fixed #10625: biome migrate no longer emits an invalid trailing comma when a renamed rule (such as noConsoleLognoConsole) is the last member of its rule group. Previously this produced malformed output that aborted the migration of a strict-JSON biome.json with a parsing error.

  • #10535 c245f9d Thanks @​Mokto! - Fixed a false positive in noUnusedVariables for Svelte files where variables referenced inside {@html expr} blocks were incorrectly reported as unused.

  • #10668 a0f197e Thanks @​Netail! - The biome init command has been updated to include a more up-to-date URL to the first-party extensions page.

  • #10667 d8c3e87 Thanks @​Netail! - Fixed #10664: useErrorCause now correctly detects a shorthand property.

  • #10696 ef2373f Thanks @​ematipico! - Fixed #9566. Improved how the Biome Language Server loads multiple configuration files inside a workspace.

  • #10705 4ccb410 Thanks @​ematipico! - Fixed #10652. Biome plugins are now properly filtered when using --only and --skip flags.

  • #10669 aa0a6eb Thanks @​Netail! - Fixed #10651: useInlineScriptId now correctly trims trivia to detect if an id attribute has been set.

  • #10689 844b1be Thanks @​ematipico! - Fixed #10658. The issue was caused by the "Go-to definition" editor feature, which was enabled by default. The feature is now disabled by default. To work, the feature triggers the scanner to build the module graph. This caused memory leak issues in cases where Biome starts in the home directory to modify files.

    If you relied on this new feature, you must now turn on using the [editor settings] of the extension e.g. Zed and VSCode.

  • #10695 043fbb5 Thanks @​ematipico! - Fixed #10674. Biome now throws an error when the field level is missing from a rule option.

  • #10712 5941df2 Thanks @​Conaclos! - Improved the diagnostic and the documentation of useFlatMap.

  • #10615 23814f1 Thanks @​qwertycxz! - Improved the DX the JSON schema when it's used by certain code editors like VSCode.

  • #10688 ec69489 Thanks @​ematipico! - Fixed a bug where the Biome Daemon did not correctly shut down when the editor was closed during an in-progress operation, especially while scanning.

  • #10701 6c2e0d7 Thanks @​ematipico! - Fixed #10694. The Biome Language Server no longer prints an error when the user hovers a variable imported from node_modules.

  • #10681 888515b Thanks @​Conaclos! - Fixed useExportType that reported useless details in some diagnostics.

... (truncated)

Commits

Updates @types/node from 25.9.1 to 26.0.0

Commits

Updates @vercel/node from 5.8.5 to 5.8.20

Release notes

Sourced from @​vercel/node's releases.

@​vercel/node@​5.8.20

Patch Changes

  • Updated dependencies [9fb2976]
  • Updated dependencies [186014d]
  • Updated dependencies [cb0988f]
    • @​vercel/build-utils@​13.32.0
Changelog

Sourced from @​vercel/node's changelog.

5.8.20

Patch Changes

  • Updated dependencies [9fb2976]
  • Updated dependencies [186014d]
  • Updated dependencies [cb0988f]
    • @​vercel/build-utils@​13.32.0

5.8.19

Patch Changes

  • 2158ab6: [vc dev] Add support to experimentalServicesV2 for bindings in vc dev
  • Updated dependencies [2158ab6]
    • @​vercel/build-utils@​13.31.1

5.8.18

Patch Changes

  • Updated dependencies [8dec9ea]
  • Updated dependencies [3afdb18]
  • Updated dependencies [04f830c]
    • @​vercel/build-utils@​13.31.0

5.8.17

Patch Changes

  • Updated dependencies [01e18e8]
    • @​vercel/build-utils@​13.30.0

5.8.16

Patch Changes

  • Updated dependencies [32a730e]
    • @​vercel/build-utils@​13.29.1

5.8.15

Patch Changes

  • Updated dependencies [8d8e871]
    • @​vercel/build-utils@​13.29.0

5.8.14

Patch Changes

... (truncated)

Commits

Updates vercel from 54.5.0 to 54.16.0

Release notes

Sourced from vercel's releases.

vercel@54.16.0

Minor Changes

  • 9fb2976: Add services as the canonical multi-service project configuration and keep experimentalServicesV2 as a deprecated backwards-compatible alias.
  • 260b0be: Support the VQS idempotency key header in the local development server.

Patch Changes

  • 6a43bf2: Adding 2 additional headers to Vercel API calls

  • 186014d: Fix vc dev erroring with "Project framework is set to 'services', but no services are declared" for experimentalServicesV2 (services) projects. When the dev server already has resolved services, it now skips zero-config builder detection and lets the services orchestrator build and run them. Previously detectBuilders ran with the remote framework: "services" setting but no service config threaded in, which failed even though detection had succeeded.

  • 186014d: Add an experimental container service runtime. A service with runtime: "container" either builds its Dockerfile/Containerfile and pushes the resulting OCI image to the Vercel Container Registry (VCR), or passes a prebuilt image reference through as build output.

    • @vercel/container (new builder): authenticates to VCR with the project's VERCEL_OIDC_TOKEN, ensures the repository exists, builds and pushes the image, and emits a digest-pinned reference in handler (container functions are type: "Lambda" with runtime: "container"; the platform surfaces handler as the image downstream). Uses docker on developer machines and buildah (daemonless) in the Vercel build container behind a shared ContainerEngine interface. Supports vc dev via startDevServer (local build/run, env parity, log forwarding) and prepareCache for buildah layer reuse between builds. Build flow is instrumented with tracing spans (non-secret diagnostics) and debug logging gated on BUILDER_DEBUG.
    • @vercel/build-utils: add the ContainerImage build-output type.
    • @vercel/fs-detectors: resolve container services from vercel.json (the services config and its deprecated experimentalServices / experimentalServicesV2 aliases). A Dockerfile, Containerfile, or *.dockerfile entrypoint triggers a build; any other entrypoint is treated as a prebuilt OCI image reference.
    • vercel: wire container output into vercel build result writing and config validation.

    Buildah specifics in the build container: host networking for RUN steps, native overlay storage on the XFS /vercel volume (deferring to the image's storage.conf), zstd push compression, and registry credentials read from the provisioned auth file when present. Several knobs are available for debugging: VERCEL_CONTAINER_ENGINE, VERCEL_VCR_STRICT_STORAGE, VERCEL_VCR_DISABLE_LAYER_CACHE, and VERCEL_VCR_FORCE_LOGIN.

  • 007af8f: Deduplicate the team billing settings URL into a shared getTeamBillingUrl helper.

... (truncated)

Changelog

Sourced from vercel's changelog.

54.16.0

Minor Changes

  • 9fb2976: Add services as the canonical multi-service project configuration and keep experimentalServicesV2 as a deprecated backwards-compatible alias.
  • 260b0be: Support the VQS idempotency key header in the local development server.

Patch Changes

  • 6a43bf2: Adding 2 additional headers to Vercel API calls

  • 186014d: Fix vc dev erroring with "Project framework is set to 'services', but no services are declared" for experimentalServicesV2 (services) projects. When the dev server already has resolved services, it now skips zero-config builder detection and lets the services orchestrator build and run them. Previously detectBuilders ran with the remote framework: "services" setting but no service config threaded in, which failed even though detection had succeeded.

  • 186014d: Add an experimental container service runtime. A service with runtime: "container" either builds its Dockerfile/Containerfile and pushes the resulting OCI image to the Vercel Container Registry (VCR), or passes a prebuilt image reference through as build output.

    • @vercel/container (new builder): authenticates to VCR with the project's VERCEL_OIDC_TOKEN, ensures the repository exists, builds and pushes the image, and emits a digest-pinned reference in handler (container functions are type: "Lambda" with runtime: "container"; the platform surfaces handler as the image downstream). Uses docker on developer machines and buildah (daemonless) in the Vercel build container behind a shared ContainerEngine interface. Supports vc dev via startDevServer (local build/run, env parity, log forwarding) and prepareCache for buildah layer reuse between builds. Build flow is instrumented with tracing spans (non-secret diagnostics) and debug logging gated on BUILDER_DEBUG.
    • @vercel/build-utils: add the ContainerImage build-output type.
    • @vercel/fs-detectors: resolve container services from vercel.json (the services config and its deprecated experimentalServices / experimentalServicesV2 aliases). A Dockerfile, Containerfile, or *.dockerfile entrypoint triggers a build; any other entrypoint is treated as a prebuilt OCI image reference.
    • vercel: wire container output into vercel build result writing and config validation.

    Buildah specifics in the build container: host networking for RUN steps, native overlay storage on the XFS /vercel volume (deferring to the image's storage.conf), zstd push compression, and registry credentials read from the provisioned auth file when present. Several knobs are available for debugging: VERCEL_CONTAINER_ENGINE, VERCEL_VCR_STRICT_STORAGE, VERCEL_VCR_DISABLE_LAYER_CACHE, and VERCEL_VCR_FORCE_LOGIN.

  • 007af8f: Deduplicate the team billing settings URL into a shared getTeamBillingUrl helper.

  • edb7256: [vc dev] Apply route transforms under vercel dev.

  • 1c5d3b3: Fixed scope resolution for Northstar accounts whose username collides with the slug of their default team.

... (truncated)

Commits
  • 1e55432 Version Packages (#16764)
  • ded2d92 [CLI] fix(cli): preserve local env when refreshing OIDC on link (#16775)
  • 007af8f [cli] Deduplicate the team billing URL into a shared helper (#16695)
  • 1c5d3b3 Fix scope resolution for Northstar accounts with username/team-slug collision...
  • 186014d Add experimental container runtime (#16648)
  • 6364421 Fix/explicit vercel auth on project create (#16776)
  • 6a43bf2 [cli] add invocation/session IDs to api calls as headers (#16766)
  • 260b0be [services] Support Vqs-Idempotency-Key in dev server queue broker (#16755)
  • 9fb2976 [services] experimentalServicesV2 -> services (#16757)
  • edb7256 [vc dev] Apply route transforms for dev proxy (#16700)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 4 updates: [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome), [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node), [@vercel/node](https://github.com/vercel/vercel/tree/HEAD/packages/node) and [vercel](https://github.com/vercel/vercel/tree/HEAD/packages/cli).


Updates `@biomejs/biome` from 2.4.15 to 2.5.1
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.1/packages/@biomejs/biome)

Updates `@types/node` from 25.9.1 to 26.0.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `@vercel/node` from 5.8.5 to 5.8.20
- [Release notes](https://github.com/vercel/vercel/releases)
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/node/CHANGELOG.md)
- [Commits](https://github.com/vercel/vercel/commits/@vercel/node@5.8.20/packages/node)

Updates `vercel` from 54.5.0 to 54.16.0
- [Release notes](https://github.com/vercel/vercel/releases)
- [Changelog](https://github.com/vercel/vercel/blob/main/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/vercel/vercel/commits/vercel@54.16.0/packages/cli)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: "@types/node"
  dependency-version: 26.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: "@vercel/node"
  dependency-version: 5.8.20
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: vercel
  dependency-version: 54.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 1, 2026
@dependabot
dependabot Bot requested a review from sutne as a code owner July 1, 2026 16:34
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jul 1, 2026
@vercel

vercel Bot commented Jul 1, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
personal-api Ready Ready Preview, Comment Jul 1, 2026 4:34pm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants