Skip to content

chore(deps): bump the patch-and-minor group across 1 directory with 10 updates - #23

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/patch-and-minor-595479bed6
Open

chore(deps): bump the patch-and-minor group across 1 directory with 10 updates#23
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/patch-and-minor-595479bed6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the patch-and-minor group with 10 updates in the / directory:

Package From To
@biomejs/biome 2.5.6 2.5.7
turbo 2.10.7 2.10.9
@base-ui/react 1.6.0 1.7.0
@pierre/diffs 1.3.4 1.3.5
katex 0.16.47 0.18.4
lucide-react 1.28.0 1.31.0
next 15.5.19 15.5.23
@types/react 19.2.17 19.2.18
@types/react-dom 19.2.3 19.2.4
pi-mcp-adapter 2.18.0 2.21.2

Updates @biomejs/biome from 2.5.6 to 2.5.7

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.7

2.5.7

Patch Changes

  • #10822 c171b3b Thanks @​pkallos! - Added the option ignoreIfStatements to useNullishCoalescing. Biome now flags if statements that only assign to a nullish variable (such as if (!a) { a = b }) and can rewrite them to ??=. When enabled, Biome ignores those if statements.

  • #11136 e63354c Thanks @​AkashNaickar! - Added a new nursery rule noExtendNative, which reports extending the prototype of a built-in object.

  • #10094 e007143 Thanks @​THEjacob1000! - Added the nursery rule noTailwindArbitraryValue. Biome now reports Tailwind CSS arbitrary values such as w-[400px], including in HTML/JSX class attributes, configured utility functions, and tagged templates.

  • #11184 135f476 Thanks @​subotac! - Fixed #11176: noUnknownPseudoClass now recognizes Vue's :deep() pseudo-class inside .vue style blocks.

  • #8239 a519f9d Thanks @​cormacrelf! - Fixed #8233, where Biome CLI in stdin mode didn't work correctly when handling files in projects with nested configurations. For example, with the following structure, --stdin-file-path=subdirectory/... would not use the nested configuration in subdirectory/biome.json:

    ├── biome.json
└── subdirectory
    ├── biome.json
    └── lib.js

    biome format --write --stdin-file-path=subdirectory/lib.js < subdirectory/lib.js

    Now, the nested configuration is correctly picked up and applied.

    In addition, Biome now shows a warning if --stdin-file-path is provided but that path is ignored and therefore not formatted or fixed.

  • #11138 8c2c6bd Thanks @​ematipico! - Fixed noUnnecessaryConditions: Biome now chooses the same function overload as TypeScript when an argument is a callback, so conditions that were previously missed are reported.

    The following code is now invalid, because a parameter typed () => void accepts an async callback and schedule therefore returns string:

    declare function schedule(handler: () => void): string;
declare function schedule(handler: () => Promise<void>): string | undefined;
schedule(async () => {}) ?? "fallback";

    The following code is also now invalid, because map(() => 42) returns 42:

    

    • 






... (truncated)





Changelog

Sourced from @​biomejs/biome's changelog.




2.5.7


Patch Changes


    

  • 

    #10822 c171b3b Thanks @​pkallos! - Added the option ignoreIfStatements to useNullishCoalescing. Biome now flags if statements that only assign to a nullish variable (such as if (!a) { a = b }) and can rewrite them to ??=. When enabled, Biome ignores those if statements.
    

    • 

  • 

    #11136 e63354c Thanks @​AkashNaickar! - Added a new nursery rule noExtendNative, which reports extending the prototype of a built-in object.
    

    • 

  • 

    #10094 e007143 Thanks @​THEjacob1000! - Added the nursery rule noTailwindArbitraryValue. Biome now reports Tailwind CSS arbitrary values such as w-[400px], including in HTML/JSX class attributes, configured utility functions, and tagged templates.
    

    • 

  • 

    #11184 135f476 Thanks @​subotac! - Fixed #11176: noUnknownPseudoClass now recognizes Vue's :deep() pseudo-class inside .vue style blocks.
    

    • 

  • 

    #8239 a519f9d Thanks @​cormacrelf! - Fixed #8233, where Biome CLI in
stdin mode didn't work correctly when handling files in projects with nested
configurations. For example, with the following structure,
--stdin-file-path=subdirectory/... would not use the nested configuration in
subdirectory/biome.json:
    

    ├── biome.json
└── subdirectory
    ├── biome.json
    └── lib.js

    

    biome format --write --stdin-file-path=subdirectory/lib.js < subdirectory/lib.js
    

    Now, the nested configuration is correctly picked up and applied.
    

    In addition, Biome now shows a warning if --stdin-file-path is provided but
that path is ignored and therefore not formatted or fixed.
    

    • 

  • 

    #11138 8c2c6bd Thanks @​ematipico! - Fixed noUnnecessaryConditions: Biome now chooses the same function overload as TypeScript when an argument is a callback, so conditions that were previously missed are reported.
    

    The following code is now invalid, because a parameter typed () => void accepts an async callback and schedule therefore returns string:
    

    declare function schedule(handler: () => void): string;
declare function schedule(handler: () => Promise<void>): string | undefined;
schedule(async () => {}) ?? "fallback";
    

    The following code is also now invalid, because map(() => 42) returns 42:
    

    type Mapper<T> = () => T;
declare function map<T>(mapper: Mapper<T>): T;
    

    • 






... (truncated)





Commits






Updates turbo from 2.10.7 to 2.10.9



Release notes

Sourced from turbo's releases.




Turborepo v2.10.9



What's Changed


Changelog






... (truncated)





Commits






Updates @base-ui/react from 1.6.0 to 1.7.0



Release notes

Sourced from @​base-ui/react's releases.




v1.7.0


General changes



Accordion



Alert Dialog


    

  • Prevent <AlertDialog.Root> from reopening after remounting with a reused handle (#5109) by @​michaldudak
    • 



Autocomplete



Avatar



Button



Checkbox






... (truncated)





Changelog

Sourced from @​base-ui/react's changelog.




v1.7.0


Aug 4, 2026


General changes



Accordion



Alert Dialog


    

  • Prevent <AlertDialog.Root> from reopening after remounting with a reused handle (#5109) by @​michaldudak
    • 



Autocomplete



Avatar



Button






... (truncated)





Commits

    

  • 254f474 [release] v1.7.0 (#5404)
    • 

  • 9222cda [meter] Format clamped values (#5409)
    • 

  • becc19a [combobox][autocomplete][select] Fix listbox separator semantics (#5399)
    • 

  • 7cc0eef [drawer] Fix click-only outside dismissal after swipe (#5392)
    • 

  • 1a2ca3c [all components] Fix canceled exit unmount (#5401)
    • 

  • 166e8ac [popups] Fix quadratic dev-mode trigger registration check (#5400)
    • 

  • 071e892 [all components] Avoid unused popup handle attachments (#5394)
    • 

  • cbc87d1 [select] Stabilize scroll arrow cleanup test (#5402)
    • 

  • 3b5715c [all components] Fix popup handle lifecycle regressions (#5387)
    • 

  • 54cfcc1 [typescript] Preserve published internals types (#5386)
    • 

  • Additional commits viewable in compare view
    • 







Updates @pierre/diffs from 1.3.4 to 1.3.5


Updates katex from 0.16.47 to 0.18.4



Release notes

Sourced from katex's releases.




v0.18.4


0.18.4 (2026-08-10)


Bug Fixes



v0.18.3


0.18.3 (2026-08-09)


Bug Fixes



v0.18.2


0.18.2 (2026-08-08)


Bug Fixes



v0.18.1


0.18.1 (2026-07-19)


Bug Fixes



v0.18.0


0.18.0 (2026-07-17)


Features



BREAKING CHANGES


    

  • users who apply custom styles or have allowlists targeting KaTeX's internal classes must update their selectors.
    • 



v0.17.0


0.17.0 (2026-05-22)


Performance Improvements





... (truncated)





Changelog

Sourced from katex's changelog.




0.18.4 (2026-08-10)


Bug Fixes



0.18.3 (2026-08-09)


Bug Fixes



0.18.2 (2026-08-08)


Bug Fixes



0.18.1 (2026-07-19)


Bug Fixes



0.18.0 (2026-07-17)


Features



BREAKING CHANGES


    

  • users who apply custom styles or have allowlists targeting KaTeX's internal classes must update their selectors.
    • 



0.17.0 (2026-05-22)


Performance Improvements


    

  • simplify defineFunction to avoid destructuring, improve typing (#4222) (fb604e6)
    • 



BREAKING CHANGES





... (truncated)





Commits

    

  • 49dc3d9 chore(release): 0.18.4 [ci skip]
    • 

  • e507f75 fix(environment): report invalid environment names as ParseError (#4256)
    • 

  • f0f46a8 chore(release): 0.18.3 [ci skip]
    • 

  • 1c973ae fix: allow braced arguments for delimsizing (#4255)
    • 

  • a11ce72 docs: update migration guide (#4248)
    • 

  • 95322e1 docs: add Deno section (#4254)
    • 

  • dd88e46 chore(deps): update dependency js-yaml to v4.3.1 [security] (#4263)
    • 

  • 93c362b chore(release): 0.18.2 [ci skip]
    • 

  • 0adf7e7 fix: prevent prototype pollution in settings (#4260)
    • 

  • 5a5bf20 chore(deps): update dependency postcss to v8.5.23 [security] (#4259)
    • 

  • Additional commits viewable in compare view
    • 






Install script changes

This version adds prepare script that runs during installation. Review the package contents before updating.






Updates lucide-react from 1.28.0 to 1.31.0



Release notes

Sourced from lucide-react's releases.




Version 1.31.0


What's Changed



New Contributors



Full Changelog: lucide-icons/lucide@1.30.0...1.31.0


Version 1.30.0


What's Changed



New Contributors



Full Changelog: lucide-icons/lucide@1.29.0...1.30.0


Version 1.29.0


What's Changed



Full Changelog: lucide-icons/lucide@1.28.0...1.29.0







Commits






Updates next from 15.5.19 to 15.5.23



Release notes

Sourced from next's releases.




v15.5.23


What's Changed



Full Changelog: vercel/next.js@v15.5.22...v15.5.23


v15.5.22


What's Changed



Full Changelog: vercel/next.js@v15.5.21...v15.5.22


v15.5.21


This release contains security fixes for the following advisories:


High:



Moderate:



v15.5.20


Contains no changes except publishing @next/swc-wasm-web which was accidentally not published since 15.5.15.







Commits

    

  • c91fd53 v15.5.23
    • 

  • 0cb3208 [15.x] Port ReplyServer traversal guards to FlightClient (#96405)
    • 

  • 6ad9e56 v15.5.22
    • 

  • fcc0424 [15.5] Reject TypeScript >= 7.0 with an actionable error (#96110)
    • 

  • e26f6ff v15.5.21
    • 

  • 7f5deeb [15.x] Improve performance of checking valid MPA form submissions
    • 

  • 57c31f7 [15.x] Enforce serverActions.bodySizeLimit for Server Actions in Edge runtime
    • 

  • e3e5666 [15.x] Set correct origin for internal redirects in custom server
    • 

  • 35f5013 [15.x] Ensure exotic rewrite param values are properly encoded
    • 

  • 062f667 [15.x] fix(fetch-cache): key fetch(Request, init) by the effective request
    • 

  • Additional commits viewable in compare view
    • 







Updates @types/react from 19.2.17 to 19.2.18



Commits






Updates @types/react-dom from 19.2.3 to 19.2.4



Commits






Updates pi-mcp-adapter from 2.18.0 to 2.21.2



Release notes

Sourced from pi-mcp-adapter's releases.




v2.21.2


Fixed


    

  • Reported MCP servers still connecting after a zero-result tool search, so agents retry instead of treating the result as definitive. Thanks @​Leon69924 for issue #316.
    • 

  • Rejected malformed MCP config server entries and persisted OAuth credential records at their trust boundaries, so invalid local state fails before it reaches runtime connection or token code.
    • 

  • Sized OAuth credential chunks below the Windows Credential Manager per-value limit, so oversized OAuth records persist on Windows ins...

    Description has been truncated

    

  
  



      


          

          
  
  

    
  
    
    

  

  

  



                    

          
        





  





    



      

  
        

  

      

  
  

  
          

  

    

      


  

        
          @dependabot
  




      

        
          chore(deps): bump the patch-and-minor group across 1 directory with 1…
        

          
                        
      


      

        

    
    
    

  

    


      


      

        

          

    
    
    

  

  

    
  



        

      


      

        
          9168eb7
        
      

    

  

    

      
…0 updates

Bumps the patch-and-minor group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.6` | `2.5.7` |
| [turbo](https://github.com/vercel/turborepo) | `2.10.7` | `2.10.9` |
| [@base-ui/react](https://github.com/mui/base-ui/tree/HEAD/packages/react) | `1.6.0` | `1.7.0` |
| @pierre/diffs | `1.3.4` | `1.3.5` |
| [katex](https://github.com/KaTeX/KaTeX) | `0.16.47` | `0.18.4` |
| [lucide-react](https://github.com/lucide-icons/lucide/tree/HEAD/packages/lucide-react) | `1.28.0` | `1.31.0` |
| [next](https://github.com/vercel/next.js) | `15.5.19` | `15.5.23` |
| [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.17` | `19.2.18` |
| [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.3` | `19.2.4` |
| [pi-mcp-adapter](https://github.com/nicobailon/pi-mcp-adapter) | `2.18.0` | `2.21.2` |



Updates `@biomejs/biome` from 2.5.6 to 2.5.7
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.7/packages/@biomejs/biome)

Updates `turbo` from 2.10.7 to 2.10.9
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.10.7...v2.10.9)

Updates `@base-ui/react` from 1.6.0 to 1.7.0
- [Release notes](https://github.com/mui/base-ui/releases)
- [Changelog](https://github.com/mui/base-ui/blob/master/CHANGELOG.md)
- [Commits](https://github.com/mui/base-ui/commits/v1.7.0/packages/react)

Updates `@pierre/diffs` from 1.3.4 to 1.3.5

Updates `katex` from 0.16.47 to 0.18.4
- [Release notes](https://github.com/KaTeX/KaTeX/releases)
- [Changelog](https://github.com/KaTeX/KaTeX/blob/main/CHANGELOG.md)
- [Commits](KaTeX/KaTeX@v0.16.47...v0.18.4)

Updates `lucide-react` from 1.28.0 to 1.31.0
- [Release notes](https://github.com/lucide-icons/lucide/releases)
- [Commits](https://github.com/lucide-icons/lucide/commits/1.31.0/packages/lucide-react)

Updates `next` from 15.5.19 to 15.5.23
- [Release notes](https://github.com/vercel/next.js/releases)
- [Commits](vercel/next.js@v15.5.19...v15.5.23)

Updates `@types/react` from 19.2.17 to 19.2.18
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react)

Updates `@types/react-dom` from 19.2.3 to 19.2.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom)

Updates `pi-mcp-adapter` from 2.18.0 to 2.21.2
- [Release notes](https://github.com/nicobailon/pi-mcp-adapter/releases)
- [Changelog](https://github.com/nicobailon/pi-mcp-adapter/blob/main/CHANGELOG.md)
- [Commits](nicobailon/pi-mcp-adapter@v2.18.0...v2.21.2)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: turbo
  dependency-version: 2.10.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@base-ui/react"
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: "@pierre/diffs"
  dependency-version: 1.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: katex
  dependency-version: 0.18.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: lucide-react
  dependency-version: 1.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
- dependency-name: next
  dependency-version: 15.5.23
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@types/react"
  dependency-version: 19.2.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: "@types/react-dom"
  dependency-version: 19.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: patch-and-minor
- dependency-name: pi-mcp-adapter
  dependency-version: 2.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: patch-and-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

    







  








      

  
            

    

      
    

    


      


          @dependabot
dependabot
Bot



            added
      

  dependencies

  Pull requests that update a dependency file

      

  javascript

  Pull requests that update javascript code

  labels


      Aug 17, 2026

    

  



  

  
  

  
    

        

              @dependabot


        

      

            dependabot
Bot

              requested a review
  from a team
    as a code owner


        August 17, 2026 13:05        
        
      

    





    

    

      
    

    


      


          @dependabot
dependabot
Bot



            added
      

  dependencies

  Pull requests that update a dependency file

      

  javascript

  Pull requests that update javascript code

  labels


      Aug 17, 2026

    

  












  
  

    

      

  










  








  
      

  
    Sign up for free
    to join this conversation on GitHub.
    Already have an account?
    Sign in to comment


  










      

  

    
    

    

  

    Reviewers
  


    

    No reviews







    

  


      
  

    Assignees
  



        


    No one assigned







      


  


  

    Labels
  



    

      

    dependencies

  Pull requests that update a dependency file
  

    javascript

  Pull requests that update javascript code








      

  

    

        

    Projects
  


        




    None yet




  



      


  

    
  

    Milestone
  


      No milestone





    
      
          


  

    

      
        

          
  

    Development
  



            


Successfully merging this pull request may close these issues.





  
  



      
    

  




      

    

  
        

  

    

      0 participants