Skip to content

deps: bump the app-dependencies group across 1 directory with 9 updates#123

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/app-dependencies-013fa7ad79
Open

deps: bump the app-dependencies group across 1 directory with 9 updates#123
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/app-dependencies-013fa7ad79

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 6, 2026

Bumps the app-dependencies group with 9 updates in the / directory:

Package From To
@biomejs/biome 2.4.8 2.4.10
ultracite 7.3.2 7.4.3
babel-preset-solid 1.9.10 1.9.12
solid-js 1.9.11 1.9.12
@sveltejs/kit 2.55.0 2.56.1
svelte 5.54.1 5.55.1
svelte-check 4.4.5 4.4.6
vite 8.0.1 8.0.4
convex-test 0.0.43 0.0.46

Updates @biomejs/biome from 2.4.8 to 2.4.10

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.4.10

2.4.10

Patch Changes

  • #8838 f3a6a6b Thanks @​baeseokjae! - Added new lint nursery rule noImpliedEval.

    The rule detects implied eval() usage through functions like setTimeout, setInterval, and setImmediate when called with string arguments.

    // Invalid
setTimeout("alert('Hello');", 100);
// Valid
setTimeout(() => alert("Hello"), 100);

  • #9320 93c3b6c Thanks @​taberoajorge! - Fixed #7664: noUnusedVariables no longer reports false positives for TypeScript namespace declarations that participate in declaration merging with an exported or used value declaration (const, function, or class) of the same name. The reverse direction is also handled: a value declaration merged with an exported namespace is no longer flagged.

  • #9630 1dd4a56 Thanks @​raashish1601! - Fixed #9629: noNegationElse now keeps ternary branch comments attached to the correct branch when applying its fixer.

  • #9216 04243b0 Thanks @​FrederickStempfle! - Fixed #9061: noProcessEnv now also detects process.env when process is imported from the "process" or "node:process" modules.

    Previously, only the global process object was flagged:

    import process from "node:process";
// This was not flagged, but now it is:
console.log(process.env.NODE_ENV);

  • #9692 61b7ec5 Thanks @​mkosei! - Fixed Svelte #each destructuring parsing and formatting for nested patterns such as [key, { a, b }].

  • #9627 06a0f35 Thanks @​ematipico! - Fixed #191: Improved the performance of how the Biome Language Server pulls code actions and diagnostics.

    Before, code actions were pulled and computed all at once in one request. This approach couldn't work in big files, and caused Biome to stale and have CPU usage spikes up to 100%.

    Now, code actions are pulled and computed lazily, and Biome won't choke anymore in big files.

  • #9643 5bfee36 Thanks @​dyc3! - Fixed #9347: useVueValidVBind no longer reports valid object bindings like v-bind="props".

  • #9627 06a0f35 Thanks @​ematipico! - Fixed assist diagnostics being invisible when using --diagnostic-level=error. Enforced assist violations (e.g. useSortedKeys) were filtered out before being promoted to errors, causing biome check to incorrectly return success.

  • #9695 9856a87 Thanks @​dyc3! - Added the new nursery rule noUnsafePlusOperands, which reports + and += operations that use object-like, symbol, unknown, or never operands, or that mix number with bigint.

  • #9627 06a0f35 Thanks @​ematipico! - Fixed duplicate parse errors in check and ci output. When a file had syntax errors, the same parse error was printed twice and the error count was inflated.

  • #9627 06a0f35 Thanks @​ematipico! - Improved the performance of the commands lint and check when they are called with --write.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.4.10

Patch Changes

  • #8838 f3a6a6b Thanks @​baeseokjae! - Added new lint nursery rule noImpliedEval.

    The rule detects implied eval() usage through functions like setTimeout, setInterval, and setImmediate when called with string arguments.

    // Invalid
setTimeout("alert('Hello');", 100);
// Valid
setTimeout(() => alert("Hello"), 100);

  • #9320 93c3b6c Thanks @​taberoajorge! - Fixed #7664: noUnusedVariables no longer reports false positives for TypeScript namespace declarations that participate in declaration merging with an exported or used value declaration (const, function, or class) of the same name. The reverse direction is also handled: a value declaration merged with an exported namespace is no longer flagged.

  • #9630 1dd4a56 Thanks @​raashish1601! - Fixed #9629: noNegationElse now keeps ternary branch comments attached to the correct branch when applying its fixer.

  • #9216 04243b0 Thanks @​FrederickStempfle! - Fixed #9061: noProcessEnv now also detects process.env when process is imported from the "process" or "node:process" modules.

    Previously, only the global process object was flagged:

    import process from "node:process";
// This was not flagged, but now it is:
console.log(process.env.NODE_ENV);

  • #9692 61b7ec5 Thanks @​mkosei! - Fixed Svelte #each destructuring parsing and formatting for nested patterns such as [key, { a, b }].

  • #9627 06a0f35 Thanks @​ematipico! - Fixed #191: Improved the performance of how the Biome Language Server pulls code actions and diagnostics.

    Before, code actions were pulled and computed all at once in one request. This approach couldn't work in big files, and caused Biome to stale and have CPU usage spikes up to 100%.

    Now, code actions are pulled and computed lazily, and Biome won't choke anymore in big files.

  • #9643 5bfee36 Thanks @​dyc3! - Fixed #9347: useVueValidVBind no longer reports valid object bindings like v-bind="props".

  • #9627 06a0f35 Thanks @​ematipico! - Fixed assist diagnostics being invisible when using --diagnostic-level=error. Enforced assist violations (e.g. useSortedKeys) were filtered out before being promoted to errors, causing biome check to incorrectly return success.

  • #9695 9856a87 Thanks @​dyc3! - Added the new nursery rule noUnsafePlusOperands, which reports + and += operations that use object-like, symbol, unknown, or never operands, or that mix number with bigint.

  • #9627 06a0f35 Thanks @​ematipico! - Fixed duplicate parse errors in check and ci output. When a file had syntax errors, the same parse error was printed twice and the error count was inflated.

  • #9627 06a0f35 Thanks @​ematipico! - Improved the performance of the commands lint and check when they are called with --write.

  • #9627 06a0f35 Thanks @​ematipico! - Fixed --diagnostic-level not fully filtering diagnostics. Setting --diagnostic-level=error now correctly excludes warnings and infos from both the output and the summary counts.

... (truncated)

Commits

Updates ultracite from 7.3.2 to 7.4.3

Release notes

Sourced from ultracite's releases.

ultracite@7.4.3

Patch Changes

  • 42b3552: Update the bundled VS Code settings to use js/ts.tsdk.path and js/ts.tsdk.promptToUseWorkspaceVersion instead of the deprecated typescript.tsdk setting.
  • a0a03c6: Allow utf-8 values in the unicorn/text-encoding-identifier-case rule across the bundled ESLint and Oxlint configs.

ultracite@7.4.2

Patch Changes

  • 94e770e: Remove non-existent oxlint rules (import/no-unresolved, vitest/no-done-callback) for compatibility with oxlint 1.58.0+

ultracite@7.4.0

Minor Changes

  • c189cf1: Add support for new agent integrations including Zencoder, Ona, OpenClaw, Continue, Snowflake Cortex, Deepagents, Qoder, Kimi CLI, Kode, MCPJam, Mux, Pi, Neovate, Pochi, and AdaL, plus add CodeBuddy as a supported editor.

Patch Changes

  • 04d8455: Add no-void rule with allowAsStatement to complement no-floating-promises
  • e38d579: Fix DEP0190 deprecation warnings in check, fix, and doctor by routing CLI subprocesses through a shared cross-spawn runner with shell: false, while preserving Windows command resolution and direct file-path argument passing.
  • 98cb8c2: Pin ESLint initialization to a peer-compatible dependency set so ultracite init no longer installs an incompatible eslint@latest with eslint-plugin-github
  • fd7d05f: Disable conflicting vitest/prefer-called-times oxlint rule to resolve conflict with vitest/prefer-called-once
  • 581ea40: Add typed ultracite/oxlint exports for use in oxlint.config.ts.
Commits

Updates babel-preset-solid from 1.9.10 to 1.9.12

Commits

Updates solid-js from 1.9.11 to 1.9.12

Commits

Updates @sveltejs/kit from 2.55.0 to 2.56.1

Release notes

Sourced from @​sveltejs/kit's releases.

@​sveltejs/kit@​2.56.1

Patch Changes

  • chore: update JSDoc (#15640)

@​sveltejs/kit@​2.56.0

Minor Changes

  • breaking: rework client-driven refreshes (#15562)

  • breaking: stabilize remote function caching by sorting object keys (#15570)

  • breaking: add run() method to queries, disallow awaiting queries outside render (#15533)

  • feat: support TypeScript 6.0 (#15595)

  • breaking: isolate command-triggered query refresh failures per-query (#15562)

  • feat: use hydratable for remote function transport (#15533)

  • feat: allow form fields to specify a default value (field.as(type, value)) (#15577)

Patch Changes

  • fix: don't request new data when .refresh is called on a query with no cache entry (#15533)

  • fix: allow using multiple remote functions within one async derived (#15561)

  • fix: avoid false-positive overridden Vite base setting warning when setting a paths.base in svelte.config.js (#15623)

  • fix: manage queries in their own $effect.root (#15533)

  • fix: avoid inlineDynamicImports deprecation warning when building the service worker with Vite 8 (#15550)

  • fix: correctly escape backticks when precomputing CSS (#15593)

  • fix: discard obsolete forks before finishing navigation (#15634)

... (truncated)

Changelog

Sourced from @​sveltejs/kit's changelog.

2.56.1

Patch Changes

  • chore: update JSDoc (#15640)

2.56.0

Minor Changes

  • breaking: rework client-driven refreshes (#15562)

  • breaking: stabilize remote function caching by sorting object keys (#15570)

  • breaking: add run() method to queries, disallow awaiting queries outside render (#15533)

  • feat: support TypeScript 6.0 (#15595)

  • breaking: isolate command-triggered query refresh failures per-query (#15562)

  • feat: use hydratable for remote function transport (#15533)

  • feat: allow form fields to specify a default value (field.as(type, value)) (#15577)

Patch Changes

  • fix: don't request new data when .refresh is called on a query with no cache entry (#15533)

  • fix: allow using multiple remote functions within one async derived (#15561)

  • fix: avoid false-positive overridden Vite base setting warning when setting a paths.base in svelte.config.js (#15623)

  • fix: manage queries in their own $effect.root (#15533)

  • fix: avoid inlineDynamicImports deprecation warning when building the service worker with Vite 8 (#15550)

  • fix: correctly escape backticks when precomputing CSS (#15593)

... (truncated)

Commits

Updates svelte from 5.54.1 to 5.55.1

Release notes

Sourced from svelte's releases.

svelte@5.55.1

Patch Changes

  • fix: correctly handle bindings on the server (#18009)

  • fix: prevent hydration error on async {@html ...} (#17999)

  • fix: cleanup superTypeParameters in ClassDeclarations/ClassExpression (#18015)

  • fix: improve duplicate module import error message (#18016)

  • fix: reschedule new effects in prior batches (#18021)

svelte@5.55.0

Minor Changes

  • feat: export TweenOptions, SpringOptions, SpringUpdateOptions and Updater from svelte/motion (#17967)

Patch Changes

  • fix: ensure HMR wrapper forwards correct start/end nodes to active effect (#17985)
Changelog

Sourced from svelte's changelog.

5.55.1

Patch Changes

  • fix: correctly handle bindings on the server (#18009)

  • fix: prevent hydration error on async {@html ...} (#17999)

  • fix: cleanup superTypeParameters in ClassDeclarations/ClassExpression (#18015)

  • fix: improve duplicate module import error message (#18016)

  • fix: reschedule new effects in prior batches (#18021)

5.55.0

Minor Changes

  • feat: export TweenOptions, SpringOptions, SpringUpdateOptions and Updater from svelte/motion (#17967)

Patch Changes

  • fix: ensure HMR wrapper forwards correct start/end nodes to active effect (#17985)
Commits
  • 37ab33c Version Packages (#18006)
  • 4879f9d fix: improve duplicate module import error message (#18016)
  • 04eadbc fix: correctly handle bindings on the server (#18009)
  • 957f275 fix: cleanup superTypeParameters in ClassDeclarations/ClassExpression (...
  • a9d8439 fix: reschedule new effects in prior batches (#18021)
  • 669f6b4 fix: prevent hydration error on async {@html ...} (#17999)
  • 5e8662f chore: lots of async tests (#17997)
  • 6e52f40 Version Packages (#17984)
  • 1773cb5 fix: ensure HMR wrapper forwards correct start/end nodes to active effect (#1...
  • a94924b fix: export TweenOptions, SpringOptions, SpringUpdateOptions and Updater from...
  • See full diff in compare view

Updates svelte-check from 4.4.5 to 4.4.6

Release notes

Sourced from svelte-check's releases.

svelte-check@4.4.6

Patch Changes

  • fix: prevent config loading message in svelte-check --incremental (#2974)

  • fix: resolve svelte files with NodeNext in --incremental/tsgo (#2990)

  • perf: various optimization with ast walk (#2969)

  • fix: prevent error with escape sequence in attribute (#2968)

  • fix: typescript 6.0 compatibility (#2988)

Commits

Updates vite from 8.0.1 to 8.0.4

Release notes

Sourced from vite's releases.

v8.0.4

Please refer to CHANGELOG.md for details.

create-vite@8.0.3

Please refer to CHANGELOG.md for details.

v8.0.3

Please refer to CHANGELOG.md for details.

create-vite@8.0.2

Please refer to CHANGELOG.md for details.

v8.0.2

Please refer to CHANGELOG.md for details.

Changelog

Sourced from vite's changelog.

8.0.4 (2026-04-06)

Features

  • allow esbuild 0.28 as peer deps (#22155) (b0da973)
  • hmr: truncate list of files on hmr update (#21535) (d00e806)
  • optimizer: log when dependency scanning or bundling takes over 1s (#21797) (f61a1ab)

Bug Fixes

  • hasBothRollupOptionsAndRolldownOptions should return false for proxy case (#22043) (99897d2)
  • add types for vite/modulepreload-polyfill (#22126) (17330d2)
  • deps: update all non-major dependencies (#22073) (6daa10f)
  • deps: update all non-major dependencies (#22143) (22b0166)
  • resolve: resolve tsconfig paths starting with # (#22038) (3460fc5)
  • ssr: use browser platform for webworker SSR builds (fix #21969) (#21963) (364c227)

Documentation

Miscellaneous Chores

Code Refactoring

8.0.3 (2026-03-26)

Features

Bug Fixes

  • html: cache unfiltered CSS list to prevent missing styles across entries (#22017) (5464190)
  • module-runner: handle non-ascii characters in base64 sourcemaps (#21985) (77c95bf)
  • module-runner: skip re-import if the runner is closed (#22020) (ee2c2cd)
  • optimizer: scan is not resolving sub path import if used in a glob import (#22018) (ddfe20d)
  • ssr: ssrTransform incorrectly rewrites meta identifier inside import.meta when a binding named meta exists (#22019) (cff5f0c)

Miscellaneous Chores

Tests

8.0.2 (2026-03-23)

... (truncated)

Commits

Updates convex-test from 0.0.43 to 0.0.46

Changelog

Sourced from convex-test's changelog.

0.0.46

  • Changes finishAllScheduledFunctions to pump the macrotask queue instead of microtask queue to enable dynamic imports to resolve, which regressed in 0.0.45.

0.0.45

  • Replaces global usage with AsyncLocalStorage-scoped test state for isolation. Now tests shouldn't fail due to dirty state left behind by other tests.
  • Better support for setTimeout usage within tested functions
  • Improves typing for inline calls to t.mutation(() => {}) to be a union instead of overload so TestConvex<SpecificSchema> is assignable to TestConvex<GenericSchema>.

0.0.44

  • More correctly implements nested transactions and parallel calls.
  • Starts validating return validators.
  • Propagates auth more correctly between callsites-not scheduler or components.
Commits
  • 54a459a 0.0.46
  • 87fb111 use MessageChannel instead of queueMicrotask
  • 87018c8 0.0.45
  • 35563f1 Fix TestConvex type assignability by replacing overloaded signatures (#79)
  • 766cabb allow setTimeout to work within actions (#78)
  • de47686 Use ALS instead of Convex global to run tests (#77)
  • 3ceaa29 Merge 3 branches:
  • 4b34763 0.0.44
  • e5e6124 add more tests for scheduling and crossing boundaries
  • c490356 fix propagating auth into children with new ALS setup
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps: bump the app-dependencies group across 1 directory with 9 updates
6ea7774 
Bumps the app-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.8` | `2.4.10` |
| [ultracite](https://github.com/haydenbleasel/ultracite) | `7.3.2` | `7.4.3` |
| [babel-preset-solid](https://github.com/solidjs/solid) | `1.9.10` | `1.9.12` |
| [solid-js](https://github.com/solidjs/solid) | `1.9.11` | `1.9.12` |
| [@sveltejs/kit](https://github.com/sveltejs/kit/tree/HEAD/packages/kit) | `2.55.0` | `2.56.1` |
| [svelte](https://github.com/sveltejs/svelte/tree/HEAD/packages/svelte) | `5.54.1` | `5.55.1` |
| [svelte-check](https://github.com/sveltejs/language-tools) | `4.4.5` | `4.4.6` |
| [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.0.1` | `8.0.4` |
| [convex-test](https://github.com/get-convex/convex-test) | `0.0.43` | `0.0.46` |



Updates `@biomejs/biome` from 2.4.8 to 2.4.10
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.10/packages/@biomejs/biome)

Updates `ultracite` from 7.3.2 to 7.4.3
- [Release notes](https://github.com/haydenbleasel/ultracite/releases)
- [Commits](https://github.com/haydenbleasel/ultracite/compare/ultracite@7.3.2...ultracite@7.4.3)

Updates `babel-preset-solid` from 1.9.10 to 1.9.12
- [Release notes](https://github.com/solidjs/solid/releases)
- [Changelog](https://github.com/solidjs/solid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/solidjs/solid/commits)

Updates `solid-js` from 1.9.11 to 1.9.12
- [Release notes](https://github.com/solidjs/solid/releases)
- [Changelog](https://github.com/solidjs/solid/blob/main/CHANGELOG.md)
- [Commits](https://github.com/solidjs/solid/commits)

Updates `@sveltejs/kit` from 2.55.0 to 2.56.1
- [Release notes](https://github.com/sveltejs/kit/releases)
- [Changelog](https://github.com/sveltejs/kit/blob/main/packages/kit/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/kit/commits/@sveltejs/kit@2.56.1/packages/kit)

Updates `svelte` from 5.54.1 to 5.55.1
- [Release notes](https://github.com/sveltejs/svelte/releases)
- [Changelog](https://github.com/sveltejs/svelte/blob/main/packages/svelte/CHANGELOG.md)
- [Commits](https://github.com/sveltejs/svelte/commits/svelte@5.55.1/packages/svelte)

Updates `svelte-check` from 4.4.5 to 4.4.6
- [Release notes](https://github.com/sveltejs/language-tools/releases)
- [Commits](https://github.com/sveltejs/language-tools/compare/svelte-check@4.4.5...svelte-check@4.4.6)

Updates `vite` from 8.0.1 to 8.0.4
- [Release notes](https://github.com/vitejs/vite/releases)
- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md)
- [Commits](https://github.com/vitejs/vite/commits/v8.0.4/packages/vite)

Updates `convex-test` from 0.0.43 to 0.0.46
- [Changelog](https://github.com/get-convex/convex-test/blob/main/CHANGELOG.md)
- [Commits](get-convex/convex-test@v0.0.43...v0.0.46)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.4.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: app-dependencies
- dependency-name: ultracite
  dependency-version: 7.4.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: app-dependencies
- dependency-name: babel-preset-solid
  dependency-version: 1.9.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: app-dependencies
- dependency-name: solid-js
  dependency-version: 1.9.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: app-dependencies
- dependency-name: "@sveltejs/kit"
  dependency-version: 2.56.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: app-dependencies
- dependency-name: svelte
  dependency-version: 5.55.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: app-dependencies
- dependency-name: svelte-check
  dependency-version: 4.4.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: app-dependencies
- dependency-name: vite
  dependency-version: 8.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: app-dependencies
- dependency-name: convex-test
  dependency-version: 0.0.46
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: app-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 6, 2026

Labels

The following labels could not be found: automated, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@vercel
Copy link
Copy Markdown

vercel bot commented Apr 6, 2026 •
edited
Loading

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
cable-intel-web Ready Ready Preview, Comment Apr 6, 2026 6:43am

Request Review

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants