🔧 DEPS: Update Dev dependencies (minor & patch) (patch)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
@biomejs/biome (source)	devDependencies	patch	^2.3.12 → ^2.3.13
@nx/js (source)	devDependencies	patch	22.4.1 → 22.4.2
nx (source)	devDependencies	patch	22.4.1 → 22.4.2
react (source)	devDependencies	patch	^19.2.3 → ^19.2.4
react-dom (source)	devDependencies	patch	^19.2.3 → ^19.2.4

---

Release Notes

biomejs/biome (@​biomejs/biome)

v2.3.13

Compare Source

Patch Changes

• #​8815 f924f23 Thanks @​dyc3! - Improved useVueValidVOn to be more closely aligned with the source rule. It will now properly allow modifiers for all possible keyboard events. It should have better performance when there are no violations of the rule as well.

  Now treated valid:

  <div @&#8203;keydown.arrow-down="handler"></div>
  <div @&#8203;keydown.a="handler"></div>
  <div @&#8203;keydown.b="handler"></div>
  <div @&#8203;keydown.27="foo"></div>

• #​8856 85f81f9 Thanks @​dyc3! - Fixed #​8710: Biome now parses Vue dynamic slot shorthand arguments that use template literals in [].

• #​8850 2a190e0 Thanks @​dyc3! - Fixed #​8708: Tailwind @utility directives now parse functional utility names like px-* when Tailwind directives are enabled.

• #​8863 79386e0 Thanks @​dyc3! - Fixed an issue with biome migrate eslint where it couldn't detect rules for CSS, GraphQL, and HTML.

• #​8771 6f56b6e Thanks @​lghuahua! - Fix the --reporter=summary output incorrectly merging and displaying wrong issue counts for different rules. Fixes #​8730

• #​8714 ac3a71f Thanks @​Netail! - Added new nursery rule use-consistent-enum-value-type. This rule disallows enums from having both number and string members.

nrwl/nx (@​nx/js)

v22.4.2

Compare Source

22.4.2 (2026-01-26)

🚀 Features

• core: display batch tasks in the tui (#​33695)
• core: add variant 2 to CNW cloud prompts with promo message (#​34223)

🩹 Fixes

• core: handle resizing a bit better for inline_tui (#​34006)
• core: consolidate GitHub URL messaging when gh push fails (#​34196)
• core: cloud commands are noop when not connected rather than errors (#​34193)
• core: fall back to node_modules when tmp has noexec (#​34207, #​33991)
• devkit: allow null values in JSON schema validation (#​34167)
• react: remove file-loader dependency and update svgr migration (#​34218)

❤️ Thank You

• Claude Opus 4.5
• Colum Ferry @​Coly010
• Craigory Coppola @​AgentEnder
• FrozenPandaz @​FrozenPandaz
• Jack Hsu @​jaysoo
• Jason Jean @​FrozenPandaz
• Leosvel Pérez Espinosa @​leosvelperez
• Miguel @​mpsanchis

facebook/react (react)

v19.2.4: 19.2.4 (January 26th, 2026)

Compare Source

React Server Components

• Add more DoS mitigations to Server Actions, and harden Server Components (@​gnoff, @​lubieowoce, @​sebmarkbage, @​unstubbable)

---

Configuration

📅 Schedule: Branch creation - "before 3am every weekday" in timezone Europe/Lisbon, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.