chore(deps): update all non-major dependencies #1262

renovate · 2025-10-06T00:44:01Z

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

This PR contains the following updates:

Package	Change	Age	Confidence
@biomejs/biome (source)	`^2.2.4` -> `^2.2.5`
@microsoft/api-extractor (source)	`^7.52.13` -> `^7.53.0`
@rstest/core (source)	`^0.5.0` -> `^0.5.1`
@storybook/addon-docs (source)	`^9.1.8` -> `^9.1.10`
@storybook/addon-onboarding (source)	`^9.1.8` -> `^9.1.10`
@storybook/react (source)	`^9.1.8` -> `^9.1.10`
@storybook/vue3 (source)	`^9.1.8` -> `^9.1.10`
@tailwindcss/postcss (source)	`^4.1.13` -> `^4.1.14`
@testing-library/jest-dom	`^6.8.0` -> `^6.9.1`
@types/node (source)	`^22.18.6` -> `^22.18.8`
@types/react (source)	`^19.1.15` -> `^19.2.0`
@types/react-dom (source)	`^19.1.9` -> `^19.2.0`
@typescript/native-preview (source)	`7.0.0-dev.20250928.1` -> `7.0.0-dev.20251005.1`
cross-env	`^10.0.0` -> `^10.1.0`
memfs	`^4.47.0` -> `^4.48.1`
nx (source)	`^21.5.3` -> `^21.6.3`
pnpm (source)	`10.17.0` -> `10.18.0`
pnpm (source)	`>=10.17.0` -> `>=10.18.0`
react (source)	`^19.1.1` -> `^19.2.0`
react-dom (source)	`^19.1.1` -> `^19.2.0`
rslib (source)	`0.14.0` -> `0.15.0`
storybook (source)	`^9.1.8` -> `^9.1.10`
tailwindcss (source)	`^4.1.13` -> `^4.1.14`
typescript (source)	`^5.9.2` -> `^5.9.3`

Release Notes

biomejs/biome (@biomejs/biome)

`v2.2.5`

Compare Source

Patch Changes

#7597 5c3d542 Thanks @arendjr! - Fixed #6432: useImportExtensions now works correctly with aliased paths.
#7269 f18dac1 Thanks @CDGardner! - Fixed #6648, where Biome's noUselessFragments contained inconsistencies with ESLint for fragments only containing text.

Previously, Biome would report that fragments with only text were unnecessary under the noUselessFragments rule. Further analysis of ESLint's behavior towards these cases revealed that text-only fragments (<>A</a>, <React.Fragment>B</React.Fragment>, <RenamedFragment>B</RenamedFragment>) would not have noUselessFragments emitted for them.

On the Biome side, instances such as these would emit noUselessFragments, and applying the suggested fix would turn the text content into a proper JS string.
```
// Ended up as: - const t = "Text"
const t = <>Text</>

// Ended up as: - const e = t ? "Option A" : "Option B"
const e = t ? <>Option A</> : <>Option B</>

/* Ended up as:
  function someFunc() {
    return "Content desired to be a multi-line block of text."
  }
*/
function someFunc() {
  return <>
    Content desired to be a multi-line
    block of text.
  <>
}
```
The proposed update was to align Biome's reaction to this rule with ESLint's; the aforementioned examples will now be supported from Biome's perspective, thus valid use of fragments.
```
// These instances are now valid and won't be called out by noUselessFragments.

const t = <>Text</>
const e = t ? <>Option A</> : <>Option B</>

function someFunc() {
  return <>
    Content desired to be a multi-line
    block of text.
  <>
}
```
#7498 002cded Thanks @siketyan! - Fixed #6893: The useExhaustiveDependencies rule now correctly adds a dependency that is captured in a shorthand object member. For example:
```
useEffect(() => {
  console.log({ firstId, secondId });
}, []);
```
is now correctly fixed to:
```
useEffect(() => {
  console.log({ firstId, secondId });
}, [firstId, secondId]);
```
#7509 1b61631 Thanks @siketyan! - Added a new lint rule noReactForwardRef, which detects usages of forwardRef that is no longer needed and deprecated in React 19.

For example:
```
export const Component = forwardRef(function Component(props, ref) {
  return <div ref={ref} />;
});
```
will be fixed to:
```
export const Component = function Component({ ref, ...props }) {
  return <div ref={ref} />;
};
```
Note that the rule provides an unsafe fix, which may break the code. Don't forget to review the code after applying the fix.
#7520 3f06e19 Thanks @arendjr! - Added new nursery rule noDeprecatedImports to flag imports of deprecated symbols.

Invalid example

// foo.js
import { oldUtility } from "./utils.js";

// utils.js
/**
 * @&#8203;deprecated
 */
export function oldUtility() {}

Valid examples

// foo.js
import { newUtility, oldUtility } from "./utils.js";

// utils.js
export function newUtility() {}

// @&#8203;deprecated (this is not a JSDoc comment)
export function oldUtility() {}

#7457 9637f93 Thanks @kedevked! - Added style and requireForObjectLiteral options to the lint rule useConsistentArrowReturn.

This rule enforces a consistent return style for arrow functions. It can be configured with the following options:
- style: (default: asNeeded)
  - always: enforces that arrow functions always have a block body.
  - never: enforces that arrow functions never have a block body, when possible.
  - asNeeded: enforces that arrow functions have a block body only when necessary (e.g. for object literals).

`style: "always"`

Invalid:

const f = () => 1;

Valid:

const f = () => {
  return 1;
};

`style: "never"`

Invalid:

const f = () => {
  return 1;
};

Valid:

const f = () => 1;

`style: "asNeeded"`

Invalid:

const f = () => {
  return 1;
};

Valid:

const f = () => 1;

`style: "asNeeded"` and `requireForObjectLiteral: true`

Valid:

const f = () => {
  return { a: 1 };
};

#7510 527cec2 Thanks @rriski! - Implements #7339. GritQL patterns can now use native Biome AST nodes using their PascalCase names, in addition to the existing TreeSitter-compatible snake_case names.

engine biome(1.0)
language js(typescript,jsx)

or {
  // TreeSitter-compatible pattern
  if_statement(),

  // Native Biome AST node pattern
  JsIfStatement()
} as $stmt where {
  register_diagnostic(
    span=$stmt,
    message="Found an if statement"
  )
}

#7574 47907e7 Thanks @kedevked! - Fixed 7574. The diagnostic message for the rule useSolidForComponent now correctly emphasizes <For /> and provides a working hyperlink to the Solid documentation.
#7497 bd70f40 Thanks @siketyan! - Fixed #7320: The useConsistentCurlyBraces rule now correctly detects a string literal including " inside a JSX attribute value.
#7522 1af9931 Thanks @Netail! - Added extra references to external rules to improve migration for the following rules: noUselessFragments & noNestedComponentDefinitions
#7597 5c3d542 Thanks @arendjr! - Fixed an issue where package.json manifests would not be correctly discovered
when evaluating files in the same directory.
#7565 38d2098 Thanks @siketyan! - The resolver can now correctly resolve .ts, .tsx, .d.ts, .js files by .js extension if exists, based on the file extension substitution in TypeScript.

For example, the linter can now detect the floating promise in the following situation, if you have enabled the noFloatingPromises rule.

foo.ts
```
export async function doSomething(): Promise<void> {}
```
bar.ts
```
import { doSomething } from "./foo.js"; // doesn't exist actually, but it is resolved to `foo.ts`

doSomething(); // floating promise!
```

#7542 cadad2c Thanks @mdevils! - Added the rule noVueDuplicateKeys, which prevents duplicate keys in Vue component definitions.

This rule prevents the use of duplicate keys across different Vue component options such as props, data, computed, methods, and setup. Even if keys don't conflict in the script tag, they may cause issues in the template since Vue allows direct access to these keys.

Invalid examples

<script>
export default {
  props: ["foo"],
  data() {
    return {
      foo: "bar",
    };
  },
};
</script>

<script>
export default {
  data() {
    return {
      message: "hello",
    };
  },
  methods: {
    message() {
      console.log("duplicate key");
    },
  },
};
</script>

<script>
export default {
  computed: {
    count() {
      return this.value * 2;
    },
  },
  methods: {
    count() {
      this.value++;
    },
  },
};
</script>

Valid examples

<script>
export default {
  props: ["foo"],
  data() {
    return {
      bar: "baz",
    };
  },
  methods: {
    handleClick() {
      console.log("unique key");
    },
  },
};
</script>

<script>
export default {
  computed: {
    displayMessage() {
      return this.message.toUpperCase();
    },
  },
  methods: {
    clearMessage() {
      this.message = "";
    },
  },
};
</script>

#7546 a683acc Thanks @siketyan! - Internal data for Unicode strings have been updated to Unicode 17.0.
#7497 bd70f40 Thanks @siketyan! - Fixed #7256: The useConsistentCurlyBraces rule now correctly ignores a string literal with braces that contains only whitespaces. Previously, literals that contains single whitespace were only allowed.
#7565 38d2098 Thanks @siketyan! - The useImportExtensions rule now correctly detects imports with an invalid extension. For example, importing .ts file with .js extension is flagged by default. If you are using TypeScript with neither the allowImportingTsExtensions option nor the rewriteRelativeImportExtensions option, it's recommended to turn on the forceJsExtensions option of the rule.
#7581 8653921 Thanks @lucasweng! - Fixed #7470: solved a false positive for noDuplicateProperties. Previously, declarations in @container and @starting-style at-rules were incorrectly flagged as duplicates of identical declarations at the root selector.

For example, the linter no longer flags the display declaration in @container or the opacity declaration in @starting-style.
```
a {
  display: block;
  @&#8203;container (min-width: 600px) {
    display: none;
  }
}

[popover]:popover-open {
  opacity: 1;
  @&#8203;starting-style {
    opacity: 0;
  }
}
```
#7529 fea905f Thanks @qraqras! - Fixed #7517: the useOptionalChain rule no longer suggests changes for typeof checks on global objects.
```
// ok
typeof window !== "undefined" && window.location;
```
#7476 c015765 Thanks @ematipico! - Fixed a bug where the suppression action for noPositiveTabindex didn't place the suppression comment in the correct position.
#7511 a0039fd Thanks @arendjr! - Added nursery rule noUnusedExpressions to flag expressions used as a statement that is neither an assignment nor a function call.

Invalid examples

f; // intended to call `f()` instead

function foo() {
  0; // intended to `return 0` instead
}

Valid examples

f();

function foo() {
  return 0;
}

#7564 40e515f Thanks @turbocrime! - Fixed #6617: improved useIterableCallbackReturn to correctly handle arrow functions with a single-expression void body.

Now the following code doesn't trigger the rule anymore:
```
[].forEach(() => void null);
```

microsoft/rushstack (@microsoft/api-extractor)

`v7.53.0`

Compare Source

Fri, 03 Oct 2025 20:09:59 GMT

Minor changes

Normalize import of builtin modules to use the node: protocol.

`v7.52.15`

Compare Source

Tue, 30 Sep 2025 23:57:45 GMT

Version update only

`v7.52.14`

Compare Source

Tue, 30 Sep 2025 20:33:51 GMT

Version update only

web-infra-dev/rstest (@rstest/core)

`v0.5.1`

Compare Source

What's Changed

New Features 🎉

feat(coverage): support reportOnFailure option by @9aoy in #597
feat: support snapshotFormat option by @9aoy in #609

Bug Fixes 🐞

fix: update node builtin modules by @9aoy in #604

Document 📖

docs: update jest api alternative by @9aoy in #603
docs: introduce beforeEach / beforeAll returns by @9aoy in #607

Other Changes

chore: add hint message for some known errors by @9aoy in #608
test: fix unstable coverage tests by @9aoy in #596
chore(deps): update actions/setup-node action to v5 by @renovate[bot] in #600
chore(deps): update dependency istanbul-lib-instrument to v6 by @renovate[bot] in #598
chore(deps): update actions/github-script action to v8 by @renovate[bot] in #599
chore(workflow): allow eco-ci commenting on PR by @9aoy in #606

Full Changelog: web-infra-dev/rstest@v0.5.0...v0.5.1

storybookjs/storybook (@storybook/addon-docs)

`v9.1.10`

Compare Source

Automigrations: Add automigration for viewport and backgrounds - #31614, thanks @valentinpalkovic!
Telemetry: Log userAgent in onboarding - #32566, thanks @shilman!

`v9.1.9`

Compare Source

Angular: Enable experimental zoneless detection on Angular v21 - #32580, thanks @yannbf!
Svelte: Ignore inherited HTMLAttributes docgen when using utility types - #32173, thanks @steciuk!

storybookjs/storybook (@storybook/addon-onboarding)

`v9.1.10`

Compare Source

9.1.10

Automigrations: Add automigration for viewport and backgrounds - #31614, thanks @valentinpalkovic!
Telemetry: Log userAgent in onboarding - #32566, thanks @shilman!

`v9.1.9`

Compare Source

9.1.9

Angular: Enable experimental zoneless detection on Angular v21 - #32580, thanks @yannbf!
Svelte: Ignore inherited HTMLAttributes docgen when using utility types - #32173, thanks @steciuk!

tailwindlabs/tailwindcss (@tailwindcss/postcss)

`v4.1.14`

Compare Source

Fixed

Handle ' syntax in ClojureScript when extracting classes (#18888)
Handle @variant inside @custom-variant (#18885)
Merge suggestions when using @utility (#18900)
Ensure that file system watchers created when using the CLI are always cleaned up (#18905)
Do not generate grid-column utilities when configuring grid-column-start or grid-column-end (#18907)
Do not generate grid-row utilities when configuring grid-row-start or grid-row-end (#18907)
Prevent duplicate CSS when overwriting a static utility with a theme key (#18056)
Show Lightning CSS warnings (if any) when optimizing/minifying (#18918)
Use default export condition for @tailwindcss/vite (#18948)
Re-throw errors from PostCSS nodes (#18373)
Detect classes in markdown inline directives (#18967)
Ensure files with only @theme produce no output when built (#18979)
Support Maud templates when extracting classes (#18988)
Upgrade: Do not migrate variant = 'outline' during upgrades (#18922)
Upgrade: Show version mismatch (if any) when running upgrade tool (#19028)
Upgrade: Ensure first class inside className is migrated (#19031)
Upgrade: Migrate classes inside *ClassName and *Class attributes (#19031)

testing-library/jest-dom (@testing-library/jest-dom)

`v6.9.1`

Compare Source

`v6.9.0`

Compare Source

microsoft/typescript-go (@typescript/native-preview)

kentcdodds/cross-env (cross-env)

`v10.1.0`

Compare Source

Features

add support for default value syntax (152ae6a)

For example:

"dev:server": "cross-env wrangler dev --port ${PORT:-8787}",

If PORT is already set, use that value, otherwise fallback to 8787.

Learn more about Shell Parameter Expansion

streamich/memfs (memfs)

`v4.48.1`

Compare Source

Bug Fixes

🐛 throw EISDIR when writing over folder (d20095e)

`v4.48.0`

Compare Source

Features

handle EEXIST error when creating directories in parallel (3c9b2c8)

nrwl/nx (nx)

`v21.6.3`

Compare Source

21.6.3 (2025-10-02)

🩹 Fixes

core: improve provenance error with custom registry information (#32903)
core: optimize task hashing with BFS and performance logging (#32911)
core: tweak configure-ai-agents prompt (#32914)
core: ensure nx is published with the correct dependency version for the native packages (#32928, #32898)
js: temporarily hash all external dependencies for tasks inferred by the @nx/js/typescript plugin (#32912)
nx-dev: improve default zoom level of graph nodes in docs (#32910)
nx-dev: provide message to check previous docs w/ empty migrations (#32919)
nx-dev: watch for theme changes for project/task graph components (#32885)
nx-dev: update credit pricing link to new docs page (#32899)

❤️ Thank You

Caleb Ukle
Jason Jean @FrozenPandaz
Juri @juristr
Leosvel Pérez Espinosa @leosvelperez
MaxKless @MaxKless

`v21.6.2`

Compare Source

21.6.2 (2025-09-29)

This was a version bump only, there were no code changes.

`v21.6.1`

Compare Source

21.6.1 (2025-09-29)

🚀 Features

angular: support angular v20.3.0 (#32730)
core: replace the pagination from the tui tasks list with scrolling (#32560)
core: generate AI files in create-nx-workspace (#32442)
core: add NX_PROJECT_ROOT environment variable to runti… (#32736, #31428)
core: improve split target to support Gradle format (#32766)
core: add id, start and end time to lifecycle hooks (#32583)
core: add configure-ai-agents command (#32825)
docker: add env var for providing docker registry (#32676)
docker: ensure docker:build dependsOn build (#32697)
graph: unified graph UI and controls (#32724)
misc: add Cookiebot global scripts to astro-docs (#32660)
nx-dev: disable Algolia search on non-docs pages when Astro docs are enabled (#32789)
nx-dev: change login button to try nx cloud (5e0bcae9ef)
nx-dev: enhance UI animations & statistics display (#32863)
release: new option preserveMatchingDependencyRanges to not update matching version ranges (#32556)
rspack: respect deleteOutputPath option in rspack executor (#32609, #32015)
testing: infer task to merge reports from playwright atomized tasks (#31615)
testing: support inferring atomized tasks for cypress component tests (#32733)
testing: forward e2e-ci task options to their atomized tasks (#32765)
⚠️ webpack: remove SVGR option and provide withSvgr composable function (#32843)

🩹 Fixes

angular: install a compatible version of jest for angular (#32744)
angular-rspack: show correct file sizes in build stats for i18n builds (#32758, #32277)
angular-rspack: ensure assets extracted from stylesheets correctly #32487 (#32759, #32487)
bundling: postcss-cli-resources should handle relative urls #32582 (#32658, #32582)
core: ensure only supported bundlers are used for angular fallback to default (#32655)
core: invalidate project graph when external nodes change (#32626)
core: check if daemon process is actually alive before trying to kill it (#32661)
core: add bold styling to terminal pane title when focused (#32462)
core: resolve watcher infinite loops from missing parent gitignore support (#32604, #30313)
core: check nx packages for provenance config before running nx migrate (#32557)
core: handle uninstalled nx console case in autoinstall logic (#32673)
core: filter task duration estimation by successful tasks only (#32688)
core: move git utilities to fix WASM build (#32695)
core: detect vscode insiders as separate editor (#32679)
core: exit fork process and children when ipc connection closes (#32681)
core: improve error messages for provenance checks (#32680)
core: add missing view command to npm (#32729)
core: kill child process correctly when run-script executor process is killed and not using pseudoterminal (#32699)
core: do not shutdown daemon for project graph errors (#32764)
core: fix misc db-related issues (#32745)
core: update tui title text structure (#32793)
core: move from execFile to exec for windows support (#32836, #32713)
core: do not show placeholder parallel entries in tui when filtering (#32837)
core: do not add cache_outputs foreign key to task_details when NX_DISABLE_DB=true (#32824, #32208)
core: prevent terminal pane scrolling on tasks list events (#32818)
core: display prettier valid errors (#32771)
core: add env var to disable fetching migration metadata from registry (#32850)
core: project graph creation processes project dependencies correctly (#32784, #31454)
core: tweak messaging if vscode / cursor aren't installed (#32877)
core: spinner shows correct plugin count during project graph creation (#32871)
gradle: use project configurations to determine project dependencies (#32704)
gradle: support custom test targets (#32728)
gradle: skip targets on Netlify since the Java version is too old (#32852)
graph: update graph package (#32829)
misc: add typescript output to the eslint ignore when needed (#32775)
misc: remove unnecessary bust property from plugin hashes (#32807)
nest: setup tsconfig to use decorators #30749 (#32859, #30749)
nx-dev: correct courses page og image (#32700)
nx-dev: correctly link to url fragments for devkit (#32565)
nx-dev: implement client-side routing for documentation URLs (#32708)
nx-dev: fix client-side redirect issue for OSS cloud plan form (f1b00ca610)
react: only add react router plugin when using react router #32525 (#32814, #32525)
release: optimize release version internals (#32534)
repo: update broken CI documentation link in README (#32633, #32549)
repo: move codeql to yml based config s.t. it runs properly on forks (#32659)
repo: remove duplicate permissions block in publish workflow (#32868)
rspack: mark svgr support as deprecated (#32861)
vite: handle config server properly for libs (#32608)

⚠️ Breaking Changes

webpack: The svgr option has been removed from withReact,

❤️ Thank You

Benjamin Cabanes @bcabanes
Caleb Ukle
Chau Tran @nartc
Colum Ferry @Coly010
Copilot @Copilot
Craigory Coppola @AgentEnder
Jack Hsu @jaysoo
James Henry @JamesHenry
Jason Jean @FrozenPandaz
Jonathan Gelin @jogelin
Juri @juristr
Leosvel Pérez Espinosa @leosvelperez
Louie Weng @lourw
MaxKless @MaxKless
Miguel @mpsanchis
Miroslav Jonaš @meeroslav
Omer
Philip Fulcher

pnpm/pnpm (pnpm)

`v10.18.0`

Compare Source

Minor Changes

Added network performance monitoring to pnpm by implementing warnings for slow network requests, including both metadata fetches and tarball downloads.

Added configuration options for warning thresholds: fetchWarnTimeoutMs and fetchMinSpeedKiBps.
Warning messages are displayed when requests exceed time thresholds or fall below speed minimums

Related PR: #10025.

Patch Changes

Retry filesystem operations on EAGAIN er

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

netlify · 2025-10-06T00:45:28Z

✅ Deploy Preview for rslib ready!

Name	Link
🔨 Latest commit	`614ba00`
🔍 Latest deploy log	https://app.netlify.com/projects/rslib/deploys/68e310d57b97150008f77bd4
😎 Deploy Preview	https://deploy-preview-1262--rslib.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

chore(deps): update all non-major dependencies

614ba00

Timeless0911 approved these changes Oct 6, 2025

View reviewed changes

Timeless0911 merged commit b0367fe into main Oct 6, 2025
15 checks passed

Timeless0911 deleted the renovate/all-non-major branch October 6, 2025 01:53

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

chore(deps): update all non-major dependencies #1262

chore(deps): update all non-major dependencies #1262

Uh oh!

renovate bot commented Oct 6, 2025

Uh oh!

netlify bot commented Oct 6, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

chore(deps): update all non-major dependencies #1262

chore(deps): update all non-major dependencies #1262

Uh oh!

Conversation

renovate bot commented Oct 6, 2025

Release Notes

Patch Changes

Invalid example

Valid examples

style: "always"

style: "never"

style: "asNeeded"

style: "asNeeded" and requireForObjectLiteral: true

Invalid examples

Valid examples

Invalid examples

Valid examples

Minor changes

What's Changed

New Features 🎉

Bug Fixes 🐞

Document 📖

Other Changes

9.1.10

9.1.9

Fixed

Features

Bug Fixes

Features

21.6.3 (2025-10-02)

🩹 Fixes

❤️ Thank You

21.6.2 (2025-09-29)

21.6.1 (2025-09-29)

🚀 Features

🩹 Fixes

⚠️ Breaking Changes

❤️ Thank You

Minor Changes

Patch Changes

Configuration

Uh oh!

netlify bot commented Oct 6, 2025

✅ Deploy Preview for rslib ready!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`style: "always"`

`style: "never"`

`style: "asNeeded"`

`style: "asNeeded"` and `requireForObjectLiteral: true`