chore(deps-dev): bump the dev-dependencies group across 1 directory with 8 updates by dependabot[bot] · Pull Request #41 · IIIvan37/hexagonal-tdd-starter

dependabot · 2026-08-20T11:30:01Z

Bumps the dev-dependencies group with 1 update in the / directory: @biomejs/biome.

Updates @biomejs/biome from 2.5.5 to 2.5.9

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.5.9

2.5.9

Patch Changes
#11321 41386f3 Thanks @dyc3! - Fixed #11315: The CSS parser now recovers at declaration boundaries after bogus declarations, allowing subsequent valid declarations to be parsed.

#11248 57b197e Thanks @yanthomasdev! - Expanded the environment variable metadata used by biome rage to include BIOME_BINARY, BIOME_LOG_FILE, and RUST_BACKTRACE as well as reworded explanations for better readability.
#11377 a8798ea Thanks @Netail! - Added a new nursery rule useNamedLayer which disallows anonymous cascade layers.
@layer {
  a {
    color: red;
  }
}
#11327 6771cf5 Thanks @dyc3! - The HTML formatter now preserves meaningful blank lines in HTML, including spacing after elements with trailing spaces and blank lines between comment groups.
 <div>
   
+
   
 </div>
#10312 ba8aa18 Thanks @dyc3! - Added the nursery rule useTailwindShorthandClasses, which suggests shorter Tailwind utility classes. For example, the rule suggests replacing w-4 h-4 with size-4.

#11333 715e0cd Thanks @kkkhs! - Fixed #11328: lint/nursery/useExpect now recognizes Vitest Browser Mode expect.element() calls as assertions.
#11343 9b98211 Thanks @johncarmack1984! - Fixed #11311: the CSS parser now accepts Tailwind container-query variant names in @variant, such as @xl and @max-xl. These previously produced a parse error and a noUnknownAtRules diagnostic.
@variant @xl {
  div {
    background: red;
  }
}
#11220 3e8c488 Thanks @santichausis! - Fixed #9541: noUndeclaredVariables, noUnusedImports, and noUnusedVariables now correctly recognise exported variables and functions declared in one embedded <script> block as usable from a sibling <script> block, in Svelte's <script module>/<script> pair and Vue's non-setup <script> blocks.

For example, Biome no longer reports greet as undeclared in the following Svelte component:
<script module>

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.5.9

Patch Changes
#11321 41386f3 Thanks @dyc3! - Fixed #11315: The CSS parser now recovers at declaration boundaries after bogus declarations, allowing subsequent valid declarations to be parsed.

#11248 57b197e Thanks @yanthomasdev! - Expanded the environment variable metadata used by biome rage to include BIOME_BINARY, BIOME_LOG_FILE, and RUST_BACKTRACE as well as reworded explanations for better readability.
#11377 a8798ea Thanks @Netail! - Added a new nursery rule useNamedLayer which disallows anonymous cascade layers.
@layer {
  a {
    color: red;
  }
}
#11327 6771cf5 Thanks @dyc3! - The HTML formatter now preserves meaningful blank lines in HTML, including spacing after elements with trailing spaces and blank lines between comment groups.
 <div>
   
+
   
 </div>
#10312 ba8aa18 Thanks @dyc3! - Added the nursery rule useTailwindShorthandClasses, which suggests shorter Tailwind utility classes. For example, the rule suggests replacing w-4 h-4 with size-4.

#11333 715e0cd Thanks @kkkhs! - Fixed #11328: lint/nursery/useExpect now recognizes Vitest Browser Mode expect.element() calls as assertions.
#11343 9b98211 Thanks @johncarmack1984! - Fixed #11311: the CSS parser now accepts Tailwind container-query variant names in @variant, such as @xl and @max-xl. These previously produced a parse error and a noUnknownAtRules diagnostic.
@variant @xl {
  div {
    background: red;
  }
}
#11220 3e8c488 Thanks @santichausis! - Fixed #9541: noUndeclaredVariables, noUnusedImports, and noUnusedVariables now correctly recognise exported variables and functions declared in one embedded <script> block as usable from a sibling <script> block, in Svelte's <script module>/<script> pair and Vue's non-setup <script> blocks.

For example, Biome no longer reports greet as undeclared in the following Svelte component:
<script module>
  export function greet() {
    console.log("Hello!");

... (truncated)

Commits

2081460 ci: release (#11309)
6559e6c feat: adds the useAstroClientOnlyDirectiveValue rule for .astro files (#11299)
a8798ea feat: useNamedLayer (#11377)
85aac73 feat(lint): add noUnsafeTypeAssertion rule (#11221)
e65f07e feat(lint): nursery useControlLabel (#11312)
ba8aa18 feat(lint): add useTailwindShorthandClasses (#10312)
6b8f09c ci: release (#11236)
23c0369 feat(lint): nursery noInvalidPropertyInitValue (#11187)
52b44d6 feat(lint/html): add noSvelteLegacyConst (#11247)
0a0fbc1 feat(lint/js): add useReactCompiler (#10710)
Additional commits viewable in compare view

Updates @commitlint/cli from 21.2.1 to 21.2.2

Release notes

Sourced from @commitlint/cli's releases.

v21.2.2

21.2.2 (2026-08-13)

Bug Fixes

parse: require colon after note keywords (conventional-commits-parser 7.1.2) (#4927) (b83c515), closes conventional-changelog/conventional-changelog#1517

fix(container): resolve packages from TypeScript configs by @Guflly in conventional-changelog/commitlint#4914

fix(resolve-extends): support Yarn Plug'n'Play by @Guflly in conventional-changelog/commitlint#4933

Chore, docs, etc.

docs: fix typos in comments and JSDoc by @maxtaran2010 in conventional-changelog/commitlint#4880

docs: fix Deno setup without package.json by @awnoa in conventional-changelog/commitlint#4896

chore: repair broken lockfile from #4939 and add merge queue CI support by @escapedcat in conventional-changelog/commitlint#4941

docs(config-conventional): document rules that go beyond the spec by @escapedcat in conventional-changelog/commitlint#4910

New Contributors

@maxtaran2010 made their first contribution in conventional-changelog/commitlint#4880

@awnoa made their first contribution in conventional-changelog/commitlint#4896

@Guflly made their first contribution in conventional-changelog/commitlint#4914

Full Changelog: conventional-changelog/commitlint@v21.2.1...v21.2.2

Changelog

Sourced from @commitlint/cli's changelog.

21.2.2 (2026-08-13)

Note: Version bump only for package @commitlint/cli

Commits

d00d190 v21.2.2
f2e8dae chore: update dependency typescript to v7 (#4886)
5769d9f docs: fix typos in comments and JSDoc (#4880)
See full diff in compare view

Updates @commitlint/config-conventional from 21.2.0 to 21.2.2

Release notes

Sourced from @commitlint/config-conventional's releases.

v21.2.2

21.2.2 (2026-08-13)

Bug Fixes

parse: require colon after note keywords (conventional-commits-parser 7.1.2) (#4927) (b83c515), closes conventional-changelog/conventional-changelog#1517

fix(container): resolve packages from TypeScript configs by @Guflly in conventional-changelog/commitlint#4914

fix(resolve-extends): support Yarn Plug'n'Play by @Guflly in conventional-changelog/commitlint#4933

Chore, docs, etc.

docs: fix typos in comments and JSDoc by @maxtaran2010 in conventional-changelog/commitlint#4880

docs: fix Deno setup without package.json by @awnoa in conventional-changelog/commitlint#4896

chore: repair broken lockfile from #4939 and add merge queue CI support by @escapedcat in conventional-changelog/commitlint#4941

docs(config-conventional): document rules that go beyond the spec by @escapedcat in conventional-changelog/commitlint#4910

New Contributors

@maxtaran2010 made their first contribution in conventional-changelog/commitlint#4880

@awnoa made their first contribution in conventional-changelog/commitlint#4896

@Guflly made their first contribution in conventional-changelog/commitlint#4914

Full Changelog: conventional-changelog/commitlint@v21.2.1...v21.2.2

v21.2.1

21.2.0 (2026-06-30)

Features

resolve-extends: resolve pure-ESM presets (conventional-changelog v7/v9/v10) (#4859) (fdb566f)

Chore, doc, etc.

chore(read): replace deprecated git-raw-commits with git-client by @igordanchenko in conventional-changelog/commitlint#4860

docs(issue-template): ask for package manager and version by @escapedcat in conventional-changelog/commitlint#4867

New Contributors

@igordanchenko made their first contribution in conventional-changelog/commitlint#4860

Full Changelog: conventional-changelog/commitlint@v21.2.0...v21.2.1

Changelog

Sourced from @commitlint/config-conventional's changelog.

21.2.2 (2026-08-13)

Note: Version bump only for package @commitlint/config-conventional

Commits

d00d190 v21.2.2
3146d04 docs(config-conventional): document rules that go beyond the spec (#4910)
f2e8dae chore: update dependency typescript to v7 (#4886)
See full diff in compare view

Updates @vitest/coverage-v8 from 4.1.10 to 4.1.11

Release notes

Sourced from @vitest/coverage-v8's releases.

v4.1.11

🐞 Bug Fixes

Revive global concurrency limit for test lifecycle [backport to v4] - by @sheremet-va and @hi-ogawa in vitest-dev/vitest#10992 (5146d)

browser:

Encode iframeId in tester iframe URL [backport to v4] - by @sheremet-va, Pduhard and Claude Opus 4.8 in vitest-dev/vitest#10955 (10b2c)

Trigger playwright/chromium gc on lower disk availability [backport to v4] - by @hi-ogawa, Hiroshi Ogawa and OpenCode in vitest-dev/vitest#10951 (9851d)

mocker:

Restrict redirect mocks to the fs allowlist [backport to v4] - by @sheremet-va in vitest-dev/vitest#10974 (fe5a1)

View changes on GitHub

Commits

9bd8d46 chore: release v4.1.11 (#10995)
See full diff in compare view

Updates jscpd from 5.0.12 to 5.0.16

Release notes

Sourced from jscpd's releases.

Release v5.0.16

New Features

MCP server over stdio (--mcp) — cpd --mcp /path/to/project serves the Model Context Protocol on stdin/stdout, the transport MCP clients spawn and manage themselves (no port, no network policy). The project is scanned once at startup and kept in memory as detection-ready token hashes, so check_duplication snippet checks answer in milliseconds. Tools: check_duplication (accepts format names or file extensions), get_file_clones (clones involving one file — new over the HTTP server), get_statistics, and check_current_directory (returns the clone list). All clone/match lists are sorted biggest-first and capped by an optional limit argument (default 100) with the untruncated total always reported. Implements protocol revision 2025-06-18 (accepting 2025-03-26 / 2024-11-05 clients); all standard detection options (--min-tokens, --format, --cross-formats, ...) apply to the scan and to snippet checks. (#891)

Codebase summary (--summary) — opt-in refactoring-hotspot overview appended to the run output: top files and folders ranked by tokens, lines, size, or a token-based cyclomatic-complexity estimate, with each file's duplication share. --summary-top <n> sets the list length, --summary-by tokens|lines|size|complexity picks the ranking metric (config file: summary, summaryTop, summaryBy). Renders in console/console-full, as a compact one-line-per-entry block in the ai reporter, and as an additive summary key in the JSON report (absent when the flag is off, so the schema is unchanged for existing consumers). Computed after detection from data already in memory — runs without --summary are unaffected. (#934)

Isolated folder groups (--skip-isolated) — skip duplication between monorepo folders owned by different teams: declare isolation groups as comma-separated lists of pipe-separated folders (--skip-isolated "packages/team-a|packages/team-b,libs/a|libs/b"), and clones whose two fragments fall under two different folders of the same group are dropped. Duplication inside a single folder, against shared code, or across unrelated groups is still reported. The config file accepts the nested-array shape "skipIsolated": [["packages/a", "packages/b"]] (kebab-case skip-isolated works too), and the option applies to MCP project scans as well. Ports #628 to the Rust engine. (#942)

Security

Supply-chain hardening (OpenSSF Scorecard) — every GitHub Action in the release and CI pipelines is pinned to a full commit SHA (kept fresh by Dependabot), workflow tokens follow least privilege (top-level contents: read, write grants scoped to the jobs that need them), and the repository now has a SECURITY.md with private disclosure channels, private vulnerability reporting, and a protected master branch

Bug Fixes

GitHub "Latest" release badge stays on v5 — Rust v5 releases are created with --latest; legacy TypeScript v4 and cpd v* releases explicitly opt out, so a v4 maintenance release can no longer take the Latest badge from the v5 line

Other

npm package page polish — README links are absolute GitHub URLs so they resolve on npmjs.com, and the package description and keywords better describe what jscpd does

Dependencies

Bump Rust toolchain to 1.97 and oxc crates to 0.144 in /rust

Bump serde to 1.0.229 in /rust

Bump clap to 4.6.6 in /rust

Bump memchr to 2.8.3 in /rust

Bump xxhash-rust to 0.8.18 in /rust

Thank You ❤️

@hanzhangyu for proposing isolated folder groups for monorepos and contributing the original skipIsolated implementation (#628), which this release ports to the Rust engine

Published Packages

cpd-core@0.1.9 on crates.io

cpd-finder@0.1.11 on crates.io

cpd-reporter@0.1.9 on crates.io

cpd-tokenizer@0.1.10 on crates.io

jscpd@5.0.16 on crates.io

cpd@5.0.16 on npm

jscpd-darwin-arm64@5.0.16 on npm

jscpd-darwin-x64@5.0.16 on npm

jscpd-linux-x64-gnu@5.0.16 on npm

jscpd-linux-arm64-gnu@5.0.16 on npm

jscpd-linux-x64-musl@5.0.16 on npm

jscpd-windows-x64-msvc@5.0.16 on npm

Not Yet Published

... (truncated)

Changelog

Sourced from jscpd's changelog.

5.0.16

New Features

MCP server over stdio (--mcp) — cpd --mcp /path/to/project serves the Model Context Protocol on stdin/stdout; the project is scanned once at startup and kept in memory, so check_duplication snippet checks answer in milliseconds. Tools: check_duplication, get_file_clones, get_statistics, check_current_directory. (#891)

Codebase summary (--summary) — opt-in refactoring-hotspot overview: top files and folders ranked by tokens, lines, size, or complexity, with each file's duplication share; --summary-top and --summary-by tune it. (#934)

Isolated folder groups (--skip-isolated) — skip duplication between monorepo folders owned by different teams (--skip-isolated "packages/a|packages/b"); clones inside one folder or against shared code are still reported. Config file: "skipIsolated": [["packages/a", "packages/b"]]. (#628, #942)

Security

Supply-chain hardening (OpenSSF Scorecard) — GitHub Actions pinned to commit SHAs, least-privilege workflow tokens, SECURITY.md with private vulnerability reporting, protected master branch

Bug Fixes

GitHub "Latest" release badge stays on v5 — legacy v4 releases can no longer take the Latest badge from the v5 line

Thank You ❤️

@hanzhangyu for proposing isolated folder groups for monorepos and contributing the original skipIsolated implementation (#628), which this release ports to the Rust engine

5.0.15

New Features

SARIF: size-based severity — new --sarif-error-tokens <N> flag (also sarifErrorTokens in .jscpd.json): clones with at least N tokens are reported at level error while smaller ones stay warning. When overall duplication exceeds --threshold, all SARIF results are emitted as error. (#908)

SARIF: clone fingerprints — each result carries token_count, a clone_hash, and a partialFingerprints entry (jscpdCloneHash/v1) for cross-run result identity in consumers like GitHub code scanning. (#909)

SARIF: related-location messages — the duplicate's counterpart location now has a message linked from the primary message, so GitHub code scanning displays it. (#911)

SARIF: richer rule metadata — display name, full description, default configuration, and quality tags on the jscpd/duplicate-code rule. (#914)

Bug Fixes

Scan-root-relative report paths — report paths are relative to the scanned directory again (as in 4.x) while reporters can still resolve source files; fixes empty snippets and unresolvable paths when scanning from outside the target directory, including multi-root scans. (#872, #892)

Report version stamping — SARIF tool.driver.version and the HTML report version now match --version. (#915)

Multi-root blame attribution — git blame data is keyed by resolved path, so a second scan root no longer inherits the first root's authors

Git root discovery — walking up from a relative scan path no longer terminates before reaching the repository root

Thank You ❤️

@chrisc-onaorg for the SARIF fingerprints, related-location messages, and rule metadata (#910, #912, #914)

@darronz for the scan-root-relative paths fix (#913)

@nvuillam for proposing size-based SARIF severity (#908)

5.0.14

New Features

... (truncated)

Commits

2b08d13 release: cpd-v5.0.16
7a01672 chore: pin GitHub 'Latest' badge to v5 releases, polish npm package page
b03abda release: cpd-v5.0.15
2a6a1a4 release: cpd-v5.0.14
See full diff in compare view

Updates knip from 6.27.0 to 6.32.2

Release notes

Sourced from knip's releases.

Release 6.32.2

Support oxfmt.config.mts (#1933) (795900191dc75eec8d1e717b866bf57e1e2912cc) - thanks @joealden!

Support oxlint.config.mts (#1934) (531e2dc7c1d8bf31babea0068c34391182ec2d50) - thanks @joealden!

Fix Supported lint-staged Configs (#1935) (f9c755e414ed10baa4d01af8ddac6d04cb8d5617) - thanks @joealden!

Update dependencies (95f7c529f918dd9e1a84f92c68d064738977b825)

Update sentry snapshot (ea7929fcbd6b323c8bdd9252ac57017feeb29ecf)

Release 6.32.1

Handle referenced config files in their own plugin (resolve #1931, close #1932) (982c1d8e28cc62d3cba5ecde6dd8df2740c7c329)

Fix type-check against typescript@5.0.4 (2febefe44a8b39f74158916a2bc73933b4c281ae)

Update sentry snapshot (0397bddbf809e2b24fe59a4bea8c0258526bb565)

Release 6.32.0

fix: attribute wildcard subpath-import aliases as dependency usage (#1918) (4890a2ad5317b9e3f0ab844631ad0f0592802c3e) - thanks @jsmecham!

Add Borp plugin (5eb9ad4cfb2ccb7770eac49f6109459d30590211)

Add tsd plugin (bd4ae7041f3fc6aef27b027644f80daefc432aca)

Resolve Rollup --config argument as plugin configuration (8111f97981406f4327d5e6a655c13308a9dc4426)

Resolve babel-jest configFile from Jest transform options (24794ccecb80fdaecfe4d46a26faff46c30d9015)

Add pre-commit plugin (ac726b0918cb931a6d538797e342484812a6752e)

Thread script words through resolvers to preserve quoting (89f9ada6ca81229bf8f7293439998acc5f87d457)

Resolve entries from Mocha script arguments (353f860f8e32f05f7c87dc5501071befc0e5a293)

Detect Node test runner through c8 (fa44be722aa35c6e8b441cd8cd0f4cf644027c22)

Update dependencies (non-major) (#1922) (6b1e6f3cbb1749776e3798f46eb2b99cd95ed56a) - thanks @renovate[bot]!

fix(playwright): match config files with .cjs, .cts and .mts extensions (#1919) (1c1073a1817fdb3bcd3dc00eda2b1d858e444156) - thanks @davidpavlovschi!

Restart VS Code language server process (resolve #1923) (d48eac5a2447567a33e835ce3e1648bf3f4ffb2b)

Classify built-ins from module specifiers (resolve #1925) (3528c5d0f808b7b2155f69a1f98493ee0e3e06c1)

Don't turn absolute-path script tokens into entries (resolve #1928) (e5608e77b434145c8dd5c2c2872bfb90ae622ce7)

Update sponsors data (025884bb53eede041732723197ac0415a1a50f71)

Update dependencies (d2c0a07c09cea70ab2cae5f97d12da272a6e43e6)

Release 6.31.0

feat: Add basic support for Marko 6 and 5 (#1914) (c6b151642701f9b4864ddb5ea8e40580623f59d1) - thanks @caseycarroll!

Use Array.from in Marko compiler (5aadf47a22bdfd43bb8ad4082768e07fe37fc5ca)

Update release-it and fix release script flags (6fa9c269c65c0923965924226a5ccf0778842967)

Downgrade @types/vscode to match extension engines range (6d8e9bf5200cf982d0bc801469c4e2be5627e5b8)

Release 6.30.0

docs: migrate to Starlight Blog plugin (#1854) (c89e3e3c9) - thanks @trueberryless!

Include workspace dependencies in scoped runs (resolve #1901) (a75309eda)

Simplify workspace assembly (b3ac16411)

Document export declaration safety (ef98a7682)

Read object jsPlugin specifiers from Vite+ config (#1879) (3ea6a92d4) - thanks @matchai!

Compile gitignore negations once (6884cdb20)

Cache Node test script detection (d970f67d8)

Track only enabled workspace plugins (67d48268a)

Skip unsupported Vite config command (545bb2d36)

Add SARIF reporter (ce11cf5d4)

Track catalog refs in pnpm dlx scripts (resolve #1885, close #1886) (102189a1a)

Report unresolved catalog references (b2b86c3e5)

Track catalog references across scoped runs (resolve #1905) (f0365bae0)

... (truncated)

Commits

196a11a Release knip@6.32.2
95f7c52 Update dependencies
f9c755e Fix Supported lint-staged Configs (#1935)
531e2dc Support oxlint.config.mts (#1934)
7959001 Support oxfmt.config.mts (#1933)
437b608 Release knip@6.32.1
2febefe Fix type-check against typescript@5.0.4
982c1d8 Handle referenced config files in their own plugin (resolve #1931, close #1932)
f21bcbb Release knip@6.32.0
d2c0a07 Update dependencies
Additional commits viewable in compare view

Updates tsx from 4.23.1 to 4.23.12

Release notes

Sourced from tsx's releases.

v4.23.12

4.23.12 (2026-08-10)

Bug Fixes

shim import.meta when tokens are split by comments or newlines (#829) (ed9d330), closes #828

This release is also available on:

npm package (@latest dist-tag)

v4.23.11

4.23.11 (2026-08-07)

Bug Fixes

preserve async ESM require fallback (55cbece)

This release is also available on:

npm package (@latest dist-tag)

v4.23.10

4.23.10 (2026-08-07)

Bug Fixes

support nyc coverage discovery (#710) (ec1bcd5)

This release is also available on:

npm package (@latest dist-tag)

v4.23.9

4.23.9 (2026-08-06)

Bug Fixes

map Node test locations (2f55884)

support data URLs in tsImport (b94f46f)

This release is also available on:

npm package (@latest dist-tag)

v4.23.8

... (truncated)

Commits

ed9d330 fix: shim import.meta when tokens are split by comments or newlines (#829)
651f5be test: cover CommonJS TypeScript import.meta paths
bd3bc64 test: cover CommonJS loader source fallback
55cbece fix: preserve async ESM require fallback
6c5ba85 docs: document CommonJS default interop
ec1bcd5 fix: support nyc coverage discovery (#710)
b6e5b48 docs: clarify CommonJS default imports
2f55884 fix: map Node test locations
de935d5 docs: document Node source-map stack formatting
b94f46f fix: support data URLs in tsImport
Additional commits viewable in compare view

Updates vitest from 4.1.10 to 4.1.11

Release notes

Sourced from vitest's releases.

v4.1.11

🐞 Bug Fixes

Revive global concurrency limit for test lifecycle [backport to v4] - by @sheremet-va and @hi-ogawa in vitest-dev/vitest#10992 (5146d)

browser:

Encode iframeId in tester iframe URL [backport to v4] - by @sheremet-va, Pduhard and Claude Opus 4.8 in vitest-dev/vitest#10955 (10b2c)

Trigger playwright/chromium gc on lower disk availability [backport to v4] - by @hi-ogawa, Hiroshi Ogawa and OpenCode in vitest-dev/vitest#10951 (9851d)

mocker:

Restrict redirect mocks to the fs allowlist [backport to v4] - by @sheremet-va in vitest-dev/vitest#10974 (fe5a1)

View changes on GitHub

Commits

9bd8d46 chore: release v4.1.11 (#10995)
9851dbc fix(browser): trigger playwright/chromium gc on lower disk availability [back...
See full diff in compare view

…ith 8 updates Bumps the dev-dependencies group with 1 update in the / directory: [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome). Updates `@biomejs/biome` from 2.5.5 to 2.5.9 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.9/packages/@biomejs/biome) Updates `@commitlint/cli` from 21.2.1 to 21.2.2 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/cli/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.2/@commitlint/cli) Updates `@commitlint/config-conventional` from 21.2.0 to 21.2.2 - [Release notes](https://github.com/conventional-changelog/commitlint/releases) - [Changelog](https://github.com/conventional-changelog/commitlint/blob/master/@commitlint/config-conventional/CHANGELOG.md) - [Commits](https://github.com/conventional-changelog/commitlint/commits/v21.2.2/@commitlint/config-conventional) Updates `@vitest/coverage-v8` from 4.1.10 to 4.1.11 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/coverage-v8) Updates `jscpd` from 5.0.12 to 5.0.16 - [Release notes](https://github.com/kucherenko/jscpd/releases) - [Changelog](https://github.com/kucherenko/jscpd/blob/master/CHANGELOG.md) - [Commits](https://github.com/kucherenko/jscpd/commits/v5.0.16/rust/jscpd) Updates `knip` from 6.27.0 to 6.32.2 - [Release notes](https://github.com/webpro-nl/knip/releases) - [Commits](https://github.com/webpro-nl/knip/commits/knip@6.32.2/packages/knip) Updates `tsx` from 4.23.1 to 4.23.12 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.23.1...v4.23.12) Updates `vitest` from 4.1.10 to 4.1.11 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.11/packages/vitest) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.5.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@commitlint/cli" dependency-version: 21.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@commitlint/config-conventional" dependency-version: 21.2.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: jscpd dependency-version: 5.0.16 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: knip dependency-version: 6.32.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev-dependencies - dependency-name: tsx dependency-version: 4.23.12 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: vitest dependency-version: 4.1.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 20, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/dev-dependencies-82964cddd7 branch from bc6613e to 645e256 Compare August 23, 2026 07:34

Navigation Menu

chore(deps-dev): bump the dev-dependencies group across 1 directory with 8 updates - #41

chore(deps-dev): bump the dev-dependencies group across 1 directory with 8 updates#41
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-82964cddd7

dependabot Bot commented on behalf of github Aug 20, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Biome CLI v2.5.9

2.5.9

Patch Changes

2.5.9

Patch Changes

v21.2.2

21.2.2 (2026-08-13)

Bug Fixes

Chore, docs, etc.

New Contributors

21.2.2 (2026-08-13)

v21.2.2

21.2.2 (2026-08-13)

Bug Fixes

Chore, docs, etc.

New Contributors

v21.2.1

21.2.0 (2026-06-30)

Features

Chore, doc, etc.

New Contributors

21.2.2 (2026-08-13)

v4.1.11

🐞 Bug Fixes

View changes on GitHub

Release v5.0.16

New Features

Security

Bug Fixes

Other

Dependencies

Thank You ❤️

Published Packages

Not Yet Published

5.0.16

New Features

Security

Bug Fixes

Thank You ❤️

5.0.15

New Features

Bug Fixes

Thank You ❤️

5.0.14

New Features

Release 6.32.2

Release 6.32.1

Release 6.32.0

Release 6.31.0

Release 6.30.0

v4.23.12

4.23.12 (2026-08-10)

Bug Fixes

v4.23.11

4.23.11 (2026-08-07)

Bug Fixes

v4.23.10

4.23.10 (2026-08-07)

Bug Fixes

v4.23.9

4.23.9 (2026-08-06)

Bug Fixes

v4.23.8

v4.1.11

🐞 Bug Fixes

View changes on GitHub

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 20, 2026 •

edited

Loading