Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 27, 2025

Bumps @biomejs/biome from 2.3.6 to 2.3.7.

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.3.7

2.3.7

Patch Changes

  • #8169 7fdcec8 Thanks @​arendjr! - Fixed #7999: Correctly place await after leading comment in auto-fix action from noFloatingPromises rule.

  • #8157 12d5b42 Thanks @​Conaclos! - Fixed #8148. noInvalidUseBeforeDeclaration no longer reports some valid use before declarations.

    The following code is no longer reported as invalid:

    class classA {
      C = C;
    }
    const C = 0;
  • #8178 6ba4157 Thanks @​dyc3! - Fixed #8174, where the HTML parser would parse 2 directives as a single directive because it would not reject whitespace in Vue directives. This would cause the formatter to erroneously merge the 2 directives into one, resulting in broken code.

    - <Component v-else:property="123" />
    + <Component v-else :property="123" />
  • #8088 0eb08e8 Thanks @​db295! - Fixed #7876: The noUnusedImports rule now ignores imports that are used by @​linkcode and @​linkplain (previously supported @​link and @​see).

    The following code will no longer be a false positive:

    import type { a } from "a"
    /**
    
    {@​linkcode a}
    */
    function func() {}
  • #8119 8d64655 Thanks @​ematipico! - Improved the detection of the rule noUnnecessaryConditions. Now the rule isn't triggered for variables that are mutated inside a module.

    This logic deviates from the original rule, hence noUnnecessaryConditions is now marked as "inspired".

    In the following example, hey starts as false, but then it's assigned to a string. The rule isn't triggered inside the if check.

    let hey = false;
    function test() {
    hey = "string";

  • ... (truncated)

    Changelog

    Sourced from @​biomejs/biome's changelog.

    2.3.7

    Patch Changes

    • #8169 7fdcec8 Thanks @​arendjr! - Fixed #7999: Correctly place await after leading comment in auto-fix action from noFloatingPromises rule.

    • #8157 12d5b42 Thanks @​Conaclos! - Fixed #8148. noInvalidUseBeforeDeclaration no longer reports some valid use before declarations.

      The following code is no longer reported as invalid:

      class classA {
        C = C;
      }
      const C = 0;
    • #8178 6ba4157 Thanks @​dyc3! - Fixed #8174, where the HTML parser would parse 2 directives as a single directive because it would not reject whitespace in Vue directives. This would cause the formatter to erroneously merge the 2 directives into one, resulting in broken code.

      - <Component v-else:property="123" />
      + <Component v-else :property="123" />
    • #8088 0eb08e8 Thanks @​db295! - Fixed #7876: The noUnusedImports rule now ignores imports that are used by @​linkcode and @​linkplain (previously supported @​link and @​see).

      The following code will no longer be a false positive:

      import type { a } from "a"
      /**
      
      {@​linkcode a}
      */
      function func() {}
  • #8119 8d64655 Thanks @​ematipico! - Improved the detection of the rule noUnnecessaryConditions. Now the rule isn't triggered for variables that are mutated inside a module.

    This logic deviates from the original rule, hence noUnnecessaryConditions is now marked as "inspired".

    In the following example, hey starts as false, but then it's assigned to a string. The rule isn't triggered inside the if check.

    let hey = false;
    function test() {
    hey = "string";
    }

  • ... (truncated)

    Commits

    Dependabot compatibility score

    Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


    Dependabot commands and options

    You can trigger Dependabot actions by commenting on this PR:

    • @dependabot rebase will rebase this PR
    • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
    • @dependabot merge will merge this PR after your CI passes on it
    • @dependabot squash and merge will squash and merge this PR after your CI passes on it
    • @dependabot cancel merge will cancel a previously requested merge and block automerging
    • @dependabot reopen will reopen this PR if it is closed
    • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
    • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
    • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
    • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

    @dependabot dependabot bot added Scope: Dependencies Pull requests that update a dependency file Type: Maintenance labels Nov 27, 2025
    @coderabbitai
    Copy link

    coderabbitai bot commented Nov 27, 2025

    Important

    Review skipped

    Bot user detected.

    To trigger a single review, invoke the @coderabbitai review command.

    You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


    Comment @coderabbitai help to get the list of available commands and usage tips.

    @github-actions
    Copy link

    github-actions bot commented Nov 27, 2025

    Dependency Review

    ✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

    OpenSSF Scorecard

    PackageVersionScoreDetails
    npm/@biomejs/biome 2.3.7 UnknownUnknown
    npm/@biomejs/cli-darwin-arm64 2.3.7 UnknownUnknown
    npm/@biomejs/cli-darwin-x64 2.3.7 UnknownUnknown
    npm/@biomejs/cli-linux-arm64 2.3.7 UnknownUnknown
    npm/@biomejs/cli-linux-arm64-musl 2.3.7 UnknownUnknown
    npm/@biomejs/cli-linux-x64 2.3.7 UnknownUnknown
    npm/@biomejs/cli-linux-x64-musl 2.3.7 UnknownUnknown
    npm/@biomejs/cli-win32-arm64 2.3.7 UnknownUnknown
    npm/@biomejs/cli-win32-x64 2.3.7 UnknownUnknown

    Scanned Files

    • package-lock.json

    Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) from 2.3.6 to 2.3.7.
    - [Release notes](https://github.com/biomejs/biome/releases)
    - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
    - [Commits](https://github.com/biomejs/biome/commits/@biomejs/[email protected]/packages/@biomejs/biome)
    
    ---
    updated-dependencies:
    - dependency-name: "@biomejs/biome"
      dependency-version: 2.3.7
      dependency-type: direct:development
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    @dependabot dependabot bot force-pushed the dependabot-npm_and_yarn-biomejs-biome-2.3.7 branch from ba4ff06 to 43d5536 Compare November 27, 2025 04:28
    @TobiTenno TobiTenno enabled auto-merge (squash) November 27, 2025 04:28
    @TobiTenno TobiTenno merged commit 345ac65 into master Nov 27, 2025
    11 checks passed
    @TobiTenno TobiTenno deleted the dependabot-npm_and_yarn-biomejs-biome-2.3.7 branch November 27, 2025 04:29
    @wfcd-bot-boi
    Copy link
    Contributor

    🎉 This PR is included in version 3.1.12 🎉

    The release is available on:

    Your semantic-release bot 📦🚀

    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Labels

    released Scope: Dependencies Pull requests that update a dependency file Type: Maintenance

    Projects

    None yet

    Development

    Successfully merging this pull request may close these issues.

    3 participants