chore(deps): bump the patch-updates group across 1 directory with 26 updates by dependabot[bot] · Pull Request #70 · animo/openid4vc-playground

dependabot · 2026-01-26T08:27:58Z

Bumps the patch-updates group with 6 updates in the / directory:

Package	From	To
@biomejs/biome	`2.3.11`	`2.3.12`
@peculiar/x509	`1.14.2`	`1.14.3`
cors	`2.8.5`	`2.8.6`
zod	`4.3.5`	`4.3.6`
next	`16.1.1`	`16.1.4`
@types/react	`19.2.7`	`19.2.9`

Updates @biomejs/biome from 2.3.11 to 2.3.12

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.3.12

2.3.12

Patch Changes
#8653 047576d Thanks @dyc3! - Added new nursery rule noDuplicateAttributes to forbid duplicate attributes in HTML elements.
#8648 96d09f4 Thanks @BaeSeokJae! - Added a new nursery rule noVueOptionsApi.

Biome now reports Vue Options API usage, which is incompatible with Vue 3.6's Vapor Mode. This rule detects Options API patterns in <script> blocks, defineComponent(), and createApp() calls, helping prepare codebases for Vapor Mode adoption.

For example, the following now triggers this rule:
<script>
export default {
  data() {
    return { count: 0 };
  },
};
</script>
#8832 b08270b Thanks @Exudev! - Fixed #8809, #7985, and #8136: the noSecrets rule no longer reports false positives on common CamelCase identifiers like paddingBottom, backgroundColor, unhandledRejection, uncaughtException, and IngestGatewayLogGroup.

The entropy calculation algorithm now uses "average run length" to distinguish between legitimate CamelCase patterns (which have longer runs of same-case letters) and suspicious alternating case patterns (which have short runs).
#8793 c19fb0e Thanks @TheBaconWizard! - Properly handle parameters metavariables for arrow_function GritQL queries. The following biome search command no longer throws an error:
biome search 'arrow_function(parameters=$parameters, body=$body)'
#8561 981affb Thanks @wataryooou! - Fixed noUnusedVariables to ignore type parameters declared in ambient contexts such as declare module blocks.

#8817 652cfbb Thanks @dyc3! - Fixed #8765: The HTML parser can now parse directive modifiers with a single colon, e.g. @keydown.:.
#8704 a1914d4 Thanks @Netail! - Added the nursery rule noRootType. Disallow the usage of specified root types. (e.g. mutation and/or subscription)

Invalid:
{
  "options": {
    "disallow": ["mutation"]
  }

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.3.12

Patch Changes
#8653 047576d Thanks @dyc3! - Added new nursery rule noDuplicateAttributes to forbid duplicate attributes in HTML elements.
#8648 96d09f4 Thanks @BaeSeokJae! - Added a new nursery rule noVueOptionsApi.

Biome now reports Vue Options API usage, which is incompatible with Vue 3.6's Vapor Mode. This rule detects Options API patterns in <script> blocks, defineComponent(), and createApp() calls, helping prepare codebases for Vapor Mode adoption.

For example, the following now triggers this rule:
<script>
export default {
  data() {
    return { count: 0 };
  },
};
</script>
#8832 b08270b Thanks @Exudev! - Fixed #8809, #7985, and #8136: the noSecrets rule no longer reports false positives on common CamelCase identifiers like paddingBottom, backgroundColor, unhandledRejection, uncaughtException, and IngestGatewayLogGroup.

The entropy calculation algorithm now uses "average run length" to distinguish between legitimate CamelCase patterns (which have longer runs of same-case letters) and suspicious alternating case patterns (which have short runs).
#8793 c19fb0e Thanks @TheBaconWizard! - Properly handle parameters metavariables for arrow_function GritQL queries. The following biome search command no longer throws an error:
biome search 'arrow_function(parameters=$parameters, body=$body)'
#8561 981affb Thanks @wataryooou! - Fixed noUnusedVariables to ignore type parameters declared in ambient contexts such as declare module blocks.

#8817 652cfbb Thanks @dyc3! - Fixed #8765: The HTML parser can now parse directive modifiers with a single colon, e.g. @keydown.:.
#8704 a1914d4 Thanks @Netail! - Added the nursery rule noRootType. Disallow the usage of specified root types. (e.g. mutation and/or subscription)

Invalid:
{
  "options": {
    "disallow": ["mutation"]
  }
}

... (truncated)

Commits

fd33f86 ci: release (#8671)
a53fc75 chore: update sponsors (#8844)
4ee3bda feat(graphql_analyze): implement useLoneAnonymousOperation (#8616)
71b5c6e feat(js_analyze): implement noExcessiveClassesPerFile (#8753)
d6b2bda feat(js_analyze): implement noFloatingClasses (#8754)
17ed9d3 feat(js_analyze): implement noDivRegex (#8757)
291c9f2 feat(biome_js_analyze): port useInlineScriptId from Next.js (#8624)
96d09f4 feat(lint): add noVueOptionsApi rule (#8648)
39eb545 fix(biome_configuration): revert URL brackets (#8766)
365f7aa feat(js_analyze): implement noDuplicateEnumValues (#8711)
Additional commits viewable in compare view

Updates @peculiar/x509 from 1.14.2 to 1.14.3

Release notes

Sourced from @peculiar/x509's releases.

Release v1.14.3

What's Changed

Relax Node.js engine requirement from >=22.0.0 ro >=20.0.0 by @floriannari in PeculiarVentures/x509#119

chore(deps): bump glob from 11.0.3 to 11.1.0 by @floriannari in PeculiarVentures/x509#120

New Contributors

@floriannari made their first contribution in PeculiarVentures/x509#119

Full Changelog: PeculiarVentures/x509@v1.14.2...v1.14.3

Commits

2f6b4d4 chore(deps): update package-lock.json to add peer dependencies and bump versions
1adca5b chore(deps): bump glob from 11.0.3 to 11.1.0 (#120)
1046063 Relax Node.js engine requirement from >=22.0.0 ro >=20.0.0 (#119)
See full diff in compare view

Updates cors from 2.8.5 to 2.8.6

Release notes

Sourced from cors's releases.

v2.8.6

What's Changed

Build: Node.js@12.16 and Node.js.13.12 by @smondal in expressjs/cors#189

Update README.md for origin function callback parameters by @dstudzinski in expressjs/cors#180

Suggest passing false for disallowed domains, not erroring by @shackpank in expressjs/cors#175

Changed the term whitelist to allowlist in Documentation by @jkasun in expressjs/cors#200

Fix typo in README by @alex-grover in expressjs/cors#207

Added new link & website in the README by @manjunath00 in expressjs/cors#269

Fix functions call with extra parameter by @LuisEGR in expressjs/cors#245

🐛 Fix readme status badge by @homersimpsons in expressjs/cors#306

chore: add support for OSSF scorecard reporting by @inigomarquinez in expressjs/cors#321

ci: fix errors in ci github action for node 8 by @inigomarquinez in expressjs/cors#322

test: improved test robustness by @Alex-GF in expressjs/cors#320

chore: upgrade scorecard workflow pinned action versions by @carpasse in expressjs/cors#341

ci: add CodeQL (SAST) by @bjohansebas in expressjs/cors#340

docs: remove broken link to demo site by @dpopp07 in expressjs/cors#344

OSSF Scorecard recommendations by @UlisesGascon in expressjs/cors#350

build(deps): bump github/codeql-action from 3.24.7 to 3.28.19 by @dependabot[bot] in expressjs/cors#351

build(deps): bump coverallsapp/github-action from 1.2.5 to 2.3.6 by @dependabot[bot] in expressjs/cors#353

build(deps): bump actions/checkout from 4.1.1 to 4.2.2 by @dependabot[bot] in expressjs/cors#354

build(deps): bump ossf/scorecard-action from 2.4.0 to 2.4.2 by @dependabot[bot] in expressjs/cors#355

build(deps-dev): bump express from 4.17.1 to 4.21.2 by @dependabot[bot] in expressjs/cors#356

build(deps): bump actions/upload-artifact from 4.5.0 to 4.6.2 by @dependabot[bot] in expressjs/cors#352

build(deps-dev): bump mocha from 9.1.1 to 9.2.2 by @dependabot[bot] in expressjs/cors#358

update the docs for per request config by @jonchurch in expressjs/cors#338

(fix): readme updated for #271 origin option for * by @dhananjaysa92 in expressjs/cors#289

ci: upgrade Node versions by @UlisesGascon in expressjs/cors#359

chore: add funding to package.json by @bjohansebas in expressjs/cors#363

build(deps): bump github/codeql-action from 3.28.19 to 4.31.2 by @dependabot[bot] in expressjs/cors#371

build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by @dependabot[bot] in expressjs/cors#370

docs: Cleanup README by @efekrskl in expressjs/cors#374

chore: add node v25 by @imangas in expressjs/cors#375

Extend CI test matrix by @imangas in expressjs/cors#376

docs: simplify code examples with header comments by @jonchurch in expressjs/cors#386

docs: tweak intro, add note w/ browser enforcement, FAQ by @jonchurch in expressjs/cors#385

chore: remove HISTORY.md and nonexistent CONTRIBUTING.md from tarball by @Phillip9587 in expressjs/cors#388

Release: 2.8.6 by @UlisesGascon in expressjs/cors#390

New Contributors

@smondal made their first contribution in expressjs/cors#189

@dstudzinski made their first contribution in expressjs/cors#180

@shackpank made their first contribution in expressjs/cors#175

@jkasun made their first contribution in expressjs/cors#200

@alex-grover made their first contribution in expressjs/cors#207

@manjunath00 made their first contribution in expressjs/cors#269

@LuisEGR made their first contribution in expressjs/cors#245

@homersimpsons made their first contribution in expressjs/cors#306

@inigomarquinez made their first contribution in expressjs/cors#321

@Alex-GF made their first contribution in expressjs/cors#320

@carpasse made their first contribution in expressjs/cors#341

... (truncated)

Changelog

Sourced from cors's changelog.

2.8.6 / 2026-01-22

Improve documentation (API, context, examples...)

Remove additional markdown files from tarball

Commits

f00a8c1 2.8.6 (#390)
848e2bd chore: remove HISTORY.md and nonexistent CONTRIBUTING.md from tarball (#388)
cf8947e docs: tweak intro, add note w/ browser enforcement, FAQ (#385)
bbf62a5 docs: simplify code examples with header comments (#386)
f442e77 Extend CI test matrix (#376)
d5cf6cd ci: add support for node@25 (#375)
7e6f7ee docs: revamp content (#374)
b25644c build(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 (#370)
f881e91 build(deps): bump github/codeql-action from 3.28.19 to 4.31.2 (#371)
9a9a760 chore: add funding to package.json (#363)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by ulisesgascon, a new releaser for cors since your current version.

Updates zod from 4.3.5 to 4.3.6

Release notes

Sourced from zod's releases.

v4.3.6

Commits:

9977fb0868432461de265a773319e80a90ba3e37 Add brand.dev to sponsors

f4b7bae3468f6188b8f004e007d722148fc91d77 Update pullfrog.yml (#5634)

251d7163a0ac7740fee741428d913e3c55702ace Clean up workflow_call

edd4132466da0f5065a8e051b599d01fdd1081d8 fix: add missing User-agent to robots.txt and allow all (#5646)

85db85e9091d0706910d60c7eb2e9c181edd87bd fix: typo in codec.test.ts file (#5628)

cbf77bb12bdfda2e054818e79001f5cb3798ce76 Avoid non null assertion (#5638)

dfbbf1c1ae0c224b8131d80ddf0a264262144086 Avoid re-exported star modules (#5656)

762e911e5773f949452fd6dd4e360f2362110e8e Generalize numeric key handling

ca3c8629c0c2715571f70b44c2433cad3db7fe4e v4.3.6

Commits

ca3c862 v4.3.6
762e911 Generalize numeric key handling
dfbbf1c Avoid re-exported star modules (#5656)
cbf77bb Avoid non null assertion (#5638)
85db85e fix: typo in codec.test.ts file (#5628)
edd4132 fix: add missing User-agent to robots.txt and allow all (#5646)
251d716 Clean up workflow_call
f4b7bae Update pullfrog.yml (#5634)
9977fb0 Add brand.dev to sponsors
See full diff in compare view

Updates next from 16.1.1 to 16.1.4

Release notes

Sourced from next's releases.

v16.1.4

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Only filter next config if experimental flag is enabled (#88733)

Credits

Huge thanks to @mischnic for helping!

v16.1.3

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Fix linked list bug in LRU deleteFromLru (#88652)

Fix relative same host redirects in node middleware (#88253)

Credits

Huge thanks to @acdlite and @ijjk for helping!

v16.1.2

[!NOTE] This release is backporting bug fixes. It does not include all pending features/changes on canary.

Core Changes

Turbopack: Update to swc_core v50.2.3 (#87841) (#88296)

Fixes a crash when processing mdx files with multibyte characters. (#87713)

Turbopack: mimalloc upgrade and enabling it on musl (#88503) (#87815) (#88426)

Fixes a significant performance issue on musl-based Linux distributions (e.g. Alpine in Docker) related to musl's allocator.

Other platforms have always used mimalloc, but we previously did not use mimalloc on musl because of compilation issues that have since been resolved.

Credits

Huge thanks to @mischnic for helping!

Commits

60de6c2 v16.1.4
5f75d22 backport: Only filter next config if experimental flag is enabled (#88733) (#...
f01cf07 v16.1.3
74b43ae [backport]: Fix linked list bug in LRU deleteFromLru (#88652)
812cd75 [backport] Fix relative same host redirects in node middleware #88253 (#88630)
cb436b3 v16.1.2
e13100a [Backport] mimalloc upgrade and enabling it on musl (#88503)
beb3a76 Backport: fix: normalize CRLF line endings in jscodeshift tests on Windows #8...
da37eee Backport (16.1.x): Turbopack: Update to swc_core v50.2.3 (#87841) (#88296)
See full diff in compare view

Updates @types/react from 19.2.7 to 19.2.9

Commits

See full diff in compare view

Updates @biomejs/cli-darwin-arm64 from 2.3.11 to 2.3.12

Release notes

Sourced from @biomejs/cli-darwin-arm64's releases.

Biome CLI v2.3.12

2.3.12

Patch Changes
#8653 047576d Thanks @dyc3! - Added new nursery rule noDuplicateAttributes to forbid duplicate attributes in HTML elements.
#8648 96d09f4 Thanks @BaeSeokJae! - Added a new nursery rule noVueOptionsApi.

Biome now reports Vue Options API usage, which is incompatible with Vue 3.6's Vapor Mode. This rule detects Options API patterns in <script> blocks, defineComponent(), and createApp() calls, helping prepare codebases for Vapor Mode adoption.

For example, the following now triggers this rule:
<script>
export default {
  data() {
    return { count: 0 };
  },
};
</script>
#8832 b08270b Thanks @Exudev! - Fixed #8809, #7985, and #8136: the noSecrets rule no longer reports false positives on common CamelCase identifiers like paddingBottom, backgroundColor, unhandledRejection, uncaughtException, and IngestGatewayLogGroup.

The entropy calculation algorithm now uses "average run length" to distinguish between legitimate CamelCase patterns (which have longer runs of same-case letters) and suspicious alternating case patterns (which have short runs).
#8793 c19fb0e Thanks @TheBaconWizard! - Properly handle parameters metavariables for arrow_function GritQL queries. The following biome search command no longer throws an error:
biome search 'arrow_function(parameters=$parameters, body=$body)'
#8561 981affb Thanks @wataryooou! - Fixed noUnusedVariables to ignore type parameters declared in ambient contexts such as declare module blocks.

#8817 652cfbb Thanks @dyc3! - Fixed #8765: The HTML parser can now parse directive modifiers with a single colon, e.g. @keydown.:.
#8704 a1914d4 Thanks @Netail! - Added the nursery rule noRootType. Disallow the usage of specified root types. (e.g. mutation and/or subscription)

Invalid:
{
  "options": {
    "disallow": ["mutation"]
  }

... (truncated)

Changelog

Sourced from @biomejs/cli-darwin-arm64's changelog.

2.3.12

Patch Changes
#8653 047576d Thanks @dyc3! - Added new nursery rule noDuplicateAttributes to forbid duplicate attributes in HTML elements.
#8648 96d09f4 Thanks @BaeSeokJae! - Added a new nursery rule noVueOptionsApi.

Biome now reports Vue Options API usage, which is incompatible with Vue 3.6's Vapor Mode. This rule detects Options API patterns in <script> blocks, defineComponent(), and createApp() calls, helping prepare codebases for Vapor Mode adoption.

For example, the following now triggers this rule:
<script>
export default {
  data() {
    return { count: 0 };
  },
};
</script>
#8832 b08270b Thanks @Exudev! - Fixed #8809, #7985, and #8136: the noSecrets rule no longer reports false positives on common CamelCase identifiers like paddingBottom, backgroundColor, unhandledRejection, uncaughtException, and IngestGatewayLogGroup.

The entropy calculation algorithm now uses "average run length" to distinguish between legitimate CamelCase patterns (which have longer runs of same-case letters) and suspicious alternating case patterns (which have short runs).
#8793 c19fb0e Thanks @TheBaconWizard! - Properly handle parameters metavariables for arrow_function GritQL queries. The following biome search command no longer throws an error:
biome search 'arrow_function(parameters=$parameters, body=$body)'
#8561 981affb Thanks @wataryooou! - Fixed noUnusedVariables to ignore type parameters declared in ambient contexts such as declare module blocks.

#8817 652cfbb Thanks @dyc3! - Fixed #8765: The HTML parser can now parse directive modifiers with a single colon, e.g. @keydown.:.
#8704 a1914d4 Thanks @Netail! - Added the nursery rule noRootType. Disallow the usage of specified root types. (e.g. mutation and/or subscription)

Invalid:
{
  "options": {
    "disallow": ["mutation"]
  }
}

... (truncated)

Commits

fd33f86 ci: release (#8671)
a53fc75 chore: update sponsors (#8844)
4ee3bda feat(graphql_analyze): implement useLoneAnonymousOperation (#8616)
71b5c6e feat(js_analyze): implement noExcessiveClassesPerFile (#8753)
d6b2bda feat(js_analyze): implement noFloatingClasses (#8754)
17ed9d3 feat(js_analyze): implement noDivRegex (#8757)
291c9f2 feat(biome_js_analyze): port useInlineScriptId from Next.js (#8624)
96d09f4 feat(lint): add noVueOptionsApi rule (#8648)
39eb545 fix(biome_configuration): revert URL brackets (#8766)
365f7aa feat(js_analyze): implement noDuplicateEnumValues (#8711)
Additional commits viewable in compare view

Updates @biomejs/cli-darwin-x64 from 2.3.11 to 2.3.12

Release notes

Sourced from @biomejs/cli-darwin-x64's releases.

Biome CLI v2.3.12

2.3.12

Patch Changes
#8653 047576d Thanks @dyc3! - Added new nursery rule noDuplicateAttributes to forbid duplicate attributes in HTML elements.
#8648 96d09f4 Thanks @BaeSeokJae! - Added a new nursery rule noVueOptionsApi.

Biome now reports Vue Options API usage, which is incompatible with Vue 3.6's Vapor Mode. This rule detects Options API patterns in <script> blocks, defineComponent(), and createApp() calls, helping prepare codebases for Vapor Mode adoption.

For example, the following now triggers this rule:
<script>
export default {
  data() {
    return { count: 0 };
  },
};
</script>
#8832 b08270b Thanks @Exudev! - Fixed #8809, #7985, and #8136: the noSecrets rule no longer reports false positives on common CamelCase identifiers like paddingBottom, backgroundColor, unhandledRejection, uncaughtException, and IngestGatewayLogGroup.

The entropy calculation algorithm now uses "average run length" to distinguish between legitimate CamelCase patterns (which have longer runs of same-case letters) and suspicious alternating case patterns (which have short runs).
#8793 c19fb0e Thanks @TheBaconWizard! - Properly handle parameters metavariables for arrow_function GritQL queries. The following biome search command no longer throws an error:
biome search 'arrow_function(parameters=$parameters, body=$body)'
#8561 981affb Thanks @wataryooou! - Fixed noUnusedVariables to ignore type parameters declared in ambient contexts such as declare module blocks.

#8817 652cfbb Thanks @dyc3! - Fixed #8765: The HTML parser can now parse directive modifiers with a single colon, e.g. @keydown.:.
#8704 a1914d4 Thanks @Netail! - Added the nursery rule noRootType. Disallow the usage of specified root types. (e.g. mutation and/or subscription)

Invalid:
{
  "options": {
    "disallow": ["mutation"]
  }

... (truncated)

Changelog

Sourced from @biomejs/cli-darwin-x64's changelog.

2.3.12

Patch Changes
#8653 047576d Thanks @dyc3! - Added new nursery rule noDuplicateAttributes to forbid duplicate attributes in HTML elements.
#8648 96d09f4 Thanks @BaeSeokJae! - Added a new nursery rule noVueOptionsApi.

Biome now reports Vue Options API usage, which is incompatible with Vue 3.6's Vapor Mode. This rule detects Options API patterns in <script> blocks, defineComponent(), and createApp() calls, helping prepare codebases for Vapor Mode adoption.

For example, the following now triggers this rule:
<script>
export default {
  data() {
    return { count: 0 };
  },
};
</script>
#8832 b08270b Thanks @Exudev! - Fixed #8809, #7985, and #8136: the noSecrets rule no longer reports false positives on common CamelCase identifiers like paddingBottom, backgroundColor, unhandledRejection, uncaughtException, and IngestGatewayLogGroup.

The entropy calculation algorithm now uses "average run length" to distinguish between legitimate CamelCase patterns (which have longer runs of same-case letters) and suspicious alternating case patterns (which have short runs).
#8793 c19fb0e Thanks @TheBaconWizard! - Properly handle parameters metavariables for arrow_function GritQL queries. The following biome search command no longer throws an error:
biome search 'arrow_function(parameters=$parameters, body=$body)'
#8561 981affb Thanks @wataryooou! - Fixed noUnusedVariables to ignore type parameters declared in ambient contexts such as declare module blocks.

#8817 652cfbb Thanks @dyc3! - Fixed #8765: The HTML parser can now parse directive modifiers with a single colon, e.g. @keydown.:.
#8704 a1914d4 Thanks @Netail! - Added the nursery rule noRootType. Disallow the usage of specified root types. (e.g. mutation and/or subscription)

Invalid:
{
  "options": {
    "disallow": ["mutation"]
  }
}

... (truncated)

Commits

fd33f86 ci: release (#8671)
a53fc75 chore: update sponsors (#8844)
4ee3bda feat(graphql_analyze): implement useLoneAnonymousOperation (#8616)
71b5c6e feat(js_analyze): implement noExcessiveClassesPerFile (#8753)
d6b2bda feat(js_analyze): implement noFloatingClasses (#8754)
17ed9d3 feat(js_analyze): implement noDivRegex (#8757)
291c9f2 feat(biome_js_analyze): port useInlineScriptId from Next.js (#8624)
96d09f4 feat(lint): add noVueOptionsApi rule (#8648)
39eb545 fix(biome_configuration): revert URL brackets (#8766)
365f7aa feat(js_analyze): implement noDuplicateEnumValues (#8711)
Additional commits viewable in compare view

Updates @biomejs/cli-linux-arm64-musl from 2.3.11 to 2.3.12

Release notes

Sourced from @biomejs/cli-linux-arm64-musl's releases.

Biome CLI v2.3.12

2.3.12

Patch Changes
#8653 047576d Thanks @dyc3! - Added new nursery rule noDuplicateAttributes to forbid duplicate attributes in HTML elements.
#8648 96d09f4 Thanks @BaeSeokJae! - Added a new nursery rule noVueOptionsApi.

Biome now reports Vue Options API usage, which is incompatible with Vue 3.6's Vapor Mode. This rule detects Options API patterns in <script> blocks, defineComponent(), and createApp() calls, helping prepare codebases for Vapor Mode adoption.

For example, the following now triggers this rule:
<script>
export default {
  data() {
    return { count: 0 };
  },
};
</script>
#8832 b08270b Thanks @Exudev! - Fixed #8809, #7985, and #8136: the noSecrets rule no longer reports false positives on common CamelCase identifiers like paddingBottom, backgroundColor, unhandledRejection, uncaughtException, and IngestGatewayLogGroup.

The entropy calculation algorithm now uses "average run length" to distinguish between legitimate CamelCase patterns (which have longer runs of same-case letters) and suspicious alternating case patterns (which have short runs).

#8793 c19fb0e Thanks @TheBaconWizard! - Properly handle ...
Description has been truncated

…updates Bumps the patch-updates group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.3.11` | `2.3.12` | | [@peculiar/x509](https://github.com/PeculiarVentures/x509) | `1.14.2` | `1.14.3` | | [cors](https://github.com/expressjs/cors) | `2.8.5` | `2.8.6` | | [zod](https://github.com/colinhacks/zod) | `4.3.5` | `4.3.6` | | [next](https://github.com/vercel/next.js) | `16.1.1` | `16.1.4` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.7` | `19.2.9` | Updates `@biomejs/biome` from 2.3.11 to 2.3.12 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.3.12/packages/@biomejs/biome) Updates `@peculiar/x509` from 1.14.2 to 1.14.3 - [Release notes](https://github.com/PeculiarVentures/x509/releases) - [Commits](PeculiarVentures/x509@v1.14.2...v1.14.3) Updates `cors` from 2.8.5 to 2.8.6 - [Release notes](https://github.com/expressjs/cors/releases) - [Changelog](https://github.com/expressjs/cors/blob/master/HISTORY.md) - [Commits](expressjs/cors@v2.8.5...v2.8.6) Updates `zod` from 4.3.5 to 4.3.6 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.3.5...v4.3.6) Updates `next` from 16.1.1 to 16.1.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](vercel/next.js@v16.1.1...v16.1.4) Updates `@types/react` from 19.2.7 to 19.2.9 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@biomejs/cli-darwin-arm64` from 2.3.11 to 2.3.12 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.3.12/packages/@biomejs/biome) Updates `@biomejs/cli-darwin-x64` from 2.3.11 to 2.3.12 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.3.12/packages/@biomejs/biome) Updates `@biomejs/cli-linux-arm64-musl` from 2.3.11 to 2.3.12 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.3.12/packages/@biomejs/biome) Updates `@biomejs/cli-linux-arm64` from 2.3.11 to 2.3.12 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.3.12/packages/@biomejs/biome) Updates `@biomejs/cli-linux-x64-musl` from 2.3.11 to 2.3.12 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.3.12/packages/@biomejs/biome) Updates `@biomejs/cli-linux-x64` from 2.3.11 to 2.3.12 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.3.12/packages/@biomejs/biome) Updates `@biomejs/cli-win32-arm64` from 2.3.11 to 2.3.12 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.3.12/packages/@biomejs/biome) Updates `@biomejs/cli-win32-x64` from 2.3.11 to 2.3.12 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.3.12/packages/@biomejs/biome) Updates `@emnapi/runtime` from 1.7.1 to 1.8.1 - [Release notes](https://github.com/toyobayashi/emnapi/releases) - [Commits](toyobayashi/emnapi@v1.7.1...v1.8.1) Updates `@next/env` from 16.1.1 to 16.1.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](https://github.com/vercel/next.js/commits/v16.1.4/packages/next-env) Updates `@next/swc-darwin-arm64` from 16.1.1 to 16.1.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](https://github.com/vercel/next.js/commits/v16.1.4/crates/napi/npm/darwin-arm64) Updates `@next/swc-darwin-x64` from 16.1.1 to 16.1.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](https://github.com/vercel/next.js/commits/v16.1.4/crates/napi/npm/darwin-x64) Updates `@next/swc-linux-arm64-gnu` from 16.1.1 to 16.1.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](https://github.com/vercel/next.js/commits/v16.1.4/crates/napi/npm/linux-arm64-gnu) Updates `@next/swc-linux-arm64-musl` from 16.1.1 to 16.1.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](https://github.com/vercel/next.js/commits/v16.1.4/crates/napi/npm/linux-arm64-musl) Updates `@next/swc-linux-x64-gnu` from 16.1.1 to 16.1.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](https://github.com/vercel/next.js/commits/v16.1.4/crates/napi/npm/linux-x64-gnu) Updates `@next/swc-linux-x64-musl` from 16.1.1 to 16.1.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](https://github.com/vercel/next.js/commits/v16.1.4/crates/napi/npm/linux-x64-musl) Updates `@next/swc-win32-arm64-msvc` from 16.1.1 to 16.1.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](https://github.com/vercel/next.js/commits/v16.1.4/crates/napi/npm/win32-arm64-msvc) Updates `@next/swc-win32-x64-msvc` from 16.1.1 to 16.1.4 - [Release notes](https://github.com/vercel/next.js/releases) - [Changelog](https://github.com/vercel/next.js/blob/canary/release.js) - [Commits](https://github.com/vercel/next.js/commits/v16.1.4/crates/napi/npm/win32-x64-msvc) Updates `baseline-browser-mapping` from 2.9.11 to 2.9.18 - [Release notes](https://github.com/web-platform-dx/baseline-browser-mapping/releases) - [Commits](web-platform-dx/baseline-browser-mapping@v2.9.11...v2.9.18) Updates `caniuse-lite` from 1.0.30001761 to 1.0.30001766 - [Commits](browserslist/caniuse-lite@1.0.30001761...1.0.30001766) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.3.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@peculiar/x509" dependency-version: 1.14.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: cors dependency-version: 2.8.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: zod dependency-version: 4.3.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: next dependency-version: 16.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@types/react" dependency-version: 19.2.9 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@biomejs/cli-darwin-arm64" dependency-version: 2.3.12 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@biomejs/cli-darwin-x64" dependency-version: 2.3.12 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@biomejs/cli-linux-arm64-musl" dependency-version: 2.3.12 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@biomejs/cli-linux-arm64" dependency-version: 2.3.12 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@biomejs/cli-linux-x64-musl" dependency-version: 2.3.12 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@biomejs/cli-linux-x64" dependency-version: 2.3.12 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@biomejs/cli-win32-arm64" dependency-version: 2.3.12 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@biomejs/cli-win32-x64" dependency-version: 2.3.12 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@emnapi/runtime" dependency-version: 1.8.1 dependency-type: indirect update-type: version-update:semver-minor dependency-group: patch-updates - dependency-name: "@next/env" dependency-version: 16.1.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@next/swc-darwin-arm64" dependency-version: 16.1.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@next/swc-darwin-x64" dependency-version: 16.1.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@next/swc-linux-arm64-gnu" dependency-version: 16.1.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@next/swc-linux-arm64-musl" dependency-version: 16.1.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@next/swc-linux-x64-gnu" dependency-version: 16.1.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@next/swc-linux-x64-musl" dependency-version: 16.1.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@next/swc-win32-arm64-msvc" dependency-version: 16.1.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: "@next/swc-win32-x64-msvc" dependency-version: 16.1.4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: baseline-browser-mapping dependency-version: 2.9.18 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch-updates - dependency-name: caniuse-lite dependency-version: 1.0.30001766 dependency-type: indirect update-type: version-update:semver-patch dependency-group: patch-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-02-02T08:24:58Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file npm labels Jan 26, 2026

dependabot bot force-pushed the dependabot/npm_and_yarn/patch-updates-c28e766130 branch from 9cdb5b1 to fc827ee Compare January 26, 2026 12:01

dependabot bot closed this Feb 2, 2026

dependabot bot deleted the dependabot/npm_and_yarn/patch-updates-c28e766130 branch February 2, 2026 08:25

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the patch-updates group across 1 directory with 26 updates#70

chore(deps): bump the patch-updates group across 1 directory with 26 updates#70
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/patch-updates-c28e766130

dependabot bot commented on behalf of github Jan 26, 2026 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Feb 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Jan 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Biome CLI v2.3.12

2.3.12

Patch Changes

2.3.12

Patch Changes

Release v1.14.3

What's Changed

New Contributors

v2.8.6

What's Changed

New Contributors

2.8.6 / 2026-01-22

v4.3.6

Commits:

v16.1.4

Core Changes

Credits

v16.1.3

Core Changes

Credits

v16.1.2

Core Changes

Credits

Biome CLI v2.3.12

2.3.12

Patch Changes

2.3.12

Patch Changes

Biome CLI v2.3.12

2.3.12

Patch Changes

2.3.12

Patch Changes

Biome CLI v2.3.12

2.3.12

Patch Changes

Uh oh!

dependabot bot commented on behalf of github Feb 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Jan 26, 2026 •

edited

Loading