[dependabot]

Bumps the bun-dependencies group with 96 updates in the / directory:

Package	From	To
@biomejs/biome	2.5.6	2.5.15
@changesets/changelog-github	0.7.0	1.0.1
@changesets/cli	3.0.2	3.0.3
@types/bun	1.3.14	1.4.2
knip	6.31.0	6.41.0
turbo	2.10.8	2.11.7
@electron-forge/cli	7.11.2	8.0.1
@electron-forge/maker-deb	7.11.2	8.0.1
@electron-forge/maker-squirrel	7.11.2	8.0.1
@electron-forge/maker-zip	7.11.2	8.0.1
@electron-forge/shared-types	7.11.2	8.0.1
@types/node	26.1.2	26.6.5
electron	41.10.4	44.7.0
@ai-sdk/react	4.0.51	4.0.140
@openrouter/ai-sdk-provider	3.0.0	3.1.0
ai	7.0.48	7.0.137
cnfast	0.1.0	0.2.0
fumadocs-core	16.13.0	16.17.1
fumadocs-mdx	15.2.0	15.4.7
lucide-react	1.28.0	1.55.0
mermaid	11.17.2	12.1.0
next	16.3.5	16.4.0
react	19.2.8	19.3.0
@types/react	19.2.18	19.3.0
react-dom	19.2.8	19.3.0
@types/react-dom	19.2.4	19.3.0
zod	4.4.3	4.6.7
@types/react	19.2.18	19.3.0
@types/react-dom	19.2.4	19.3.0
postcss	8.5.26	8.5.29
vite	8.2.0	8.3.4
tsdown	0.22.14	0.23.1
swagger-ui-dist	5.32.11	5.33.1
@types/ssh2	1.15.5	1.15.6
@better-auth/oauth-provider	1.7.1	1.7.7
@better-auth/passkey	1.7.1	1.7.7
@better-auth/sso	1.7.1	1.7.7
@codemirror/lang-html	6.4.11	6.4.12
@codemirror/lang-markdown	6.5.1	6.5.2
@codemirror/language	6.12.4	6.13.1
@codemirror/legacy-modes	6.5.3	6.5.5
@codemirror/search	6.7.1	6.7.2
@codemirror/view	6.43.7	6.43.14
@streamdown/cjk	1.0.3	1.0.4
@streamdown/code	1.1.1	2.0.0
@streamdown/math	1.0.2	1.0.3
@streamdown/mermaid	1.0.2	1.0.3
@tanstack/react-form	1.33.3	1.33.5
@tanstack/react-query	5.101.4	5.104.1
@trpc/tanstack-react-query	11.18.0	11.19.0
@uiw/codemirror-theme-github	4.25.11	4.25.12
@uiw/react-codemirror	4.25.11	4.25.12
nanoid	6.0.0	6.0.2
recharts	3.8.0	3.10.1
shiki	4.4.1	4.5.0
streamdown	2.5.0	2.7.0
tailwind-merge	3.6.0	3.7.0
@axe-core/playwright	4.12.1	4.13.0
@playwright/test	1.62.1	1.64.0
@ai-sdk/anthropic	4.0.27	4.0.78
@ai-sdk/gateway	4.0.37	4.0.110
@ai-sdk/google	4.0.31	4.0.93
@ai-sdk/mcp	2.0.22	2.0.73
@ai-sdk/openai	4.0.27	4.0.91
bullmq	5.81.3	6.3.12
@simplewebauthn/server	13.3.2	14.0.3
@opentui/core	0.4.5	0.6.0
@opentui/keymap	0.4.5	0.6.0
@electric-sql/pglite	0.3.16	0.5.8
pg	8.22.0	8.23.1
@types/pg	8.20.3	8.23.1
@types/pg	8.20.3	8.23.1
drizzle-kit	0.31.10	0.31.11
nodemailer	9.1.1	10.1.0
tar-fs	2.1.5	3.1.3
yaml	2.9.0	2.9.1
@types/dockerode	4.0.1	4.0.2
@types/nodemailer	8.0.1	8.0.2
ioredis	5.11.1	6.0.0
@circulo-ai/di	3.1.0	3.5.2
drizzle-orm	0.45.2	0.45.4
@base-ui/react	1.6.0	1.9.0
@shadcn/react	0.2.1	0.3.1
shadcn	4.16.1	4.21.4
@better-auth-ui/core	1.6.43	1.7.29
@better-auth-ui/react	1.6.43	1.7.29
@better-auth/api-key	1.7.1	1.7.7
@hugeicons/core-free-icons	4.2.3	4.3.5
@hugeicons/react	1.1.9	1.1.10
@trpc/client	11.18.0	11.19.0
@trpc/server	11.18.0	11.19.0
better-auth	1.7.1	1.7.7
dotenv	17.4.2	18.0.7
evlog	2.24.0	2.30.1
hono	4.13.4	4.13.13
input-otp	1.4.2	1.5.0
react-day-picker	10.0.1	10.0.2
react-resizable-panels	4.12.2	4.14.4
sonner	2.0.7	2.0.8

Updates @biomejs/biome from 2.5.6 to 2.5.15

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.15

2.5.15

Patch Changes

• #10634 b436ba0 Thanks @​subaru-hello! - Added the new nursery rule noReactObjectTypeAsDefaultProp, which disallows array, object, and function values as default props in React components.

  For example, the following snippet triggers the rule.

  function Component({ items = [] }) {
    return items;
  }

• #11956 faa8b37 Thanks @​dyc3! - Added the nursery rule noSvelteExportLet, which disallows declaring Svelte component props with the legacy export let syntax. Use the $props() rune instead.

  <script>
    export let name;
  </script>

• #10816 1b9479e Thanks @​Th3S4mur41! - Added a new nursery rule useLogicalProperties that enforces the use of logical properties in CSS, promoting better internationalization and accessibility practices. The rule supports a direction option with "ltr" as the default and "rtl" as the alternative. This is a first rule covering parts of #9034

  {
    "linter": {
      "rules": {
        "nursery": {
          "useLogicalProperties": {
            "level": "warn",
            "options": {
              "direction": "rtl"
            }
          }
        }
      }
    }
  }

• #11960 1fdb5c2 Thanks @​dyc3! - Added the nursery rule useSvelteKitRuneImports, which reports imports from the deprecated $app/stores module and suggests $app/state instead.

  import { page } from "$app/stores";

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.15

Patch Changes

• #10634 b436ba0 Thanks @​subaru-hello! - Added the new nursery rule noReactObjectTypeAsDefaultProp, which disallows array, object, and function values as default props in React components.

  For example, the following snippet triggers the rule.

  function Component({ items = [] }) {
    return items;
  }

• #11956 faa8b37 Thanks @​dyc3! - Added the nursery rule noSvelteExportLet, which disallows declaring Svelte component props with the legacy export let syntax. Use the $props() rune instead.

  <script>
    export let name;
  </script>

• #10816 1b9479e Thanks @​Th3S4mur41! - Added a new nursery rule useLogicalProperties that enforces the use of logical properties in CSS, promoting better internationalization and accessibility practices. The rule supports a direction option with "ltr" as the default and "rtl" as the alternative. This is a first rule covering parts of #9034

  {
    "linter": {
      "rules": {
        "nursery": {
          "useLogicalProperties": {
            "level": "warn",
            "options": {
              "direction": "rtl"
            }
          }
        }
      }
    }
  }

• #11960 1fdb5c2 Thanks @​dyc3! - Added the nursery rule useSvelteKitRuneImports, which reports imports from the deprecated $app/stores module and suggests $app/state instead.

  import { page } from "$app/stores";

• #11723 3b429d1 Thanks @​m1handr! - Fixed #11656: noAstroSetHtmlDirective now correctly reports set:html directives inside Astro template expressions.

... (truncated)

Commits

• 0b4c11f ci: release (#11815)
• ad5b362 feat: adds noAstroConflictingSetDirectives rule for .astro (#11494)
• 034366d chore: update codspeed logo in readme (#12019)
• 717db8c feat(lint): add noMisplacedListElements (#11917)
• 089bde0 feat(lint/js): add useStrictBooleanExpressions (#11750)
• 1fdb5c2 feat(lint/js/svelte): add useSvelteKitRuneImports lint rule (#11960)
• faa8b37 feat(lint/js/svelte): add noSvelteExportLet (#11956)
• b2b4400 chore: update sponsors (#11973)
• ff4c4dd feat(lint/js): add noMeaninglessVoidOperator (#11732)
• 1b9479e feat(lint): add useLogicalProperties rule (#10816)
• Additional commits viewable in compare view

Updates @changesets/changelog-github from 0.7.0 to 1.0.1

Release notes

Sourced from @​changesets/changelog-github's releases.

@​changesets/changelog-github@​1.0.1

Patch Changes

• Updated dependencies [4d7b4fb]:
  • @​changesets/get-github-info@​1.0.1

@​changesets/changelog-github@​1.0.0

Major Changes

• #1482 df424a4 Thanks @​Andarist! - Bumped supported Node versions to ^22.11 || ^24 || >=26

• #1482 df424a4 Thanks @​Andarist! - From now on this package is going to be published as ES module.

Minor Changes

• #2059 070f531 Thanks @​jycouet! - Add an opt-in, experimental template option to render changelog lines from tokens ({summary}, {ref}, {pull}, {commit}, {authors}). Default output is unchanged. The token syntax may change in a patch release; pin the version if you rely on it.

• #1871 dfefc4e Thanks @​mihkeleidast! - Use GITHUB_REPOSITORY as the default repo when no repo option is configured

• #1969 2c7c043 Thanks @​marcalexiei! - Add a named export that mirrors the current default export

  The default export is slated for removal in the next major release, so this ensures a smoother transition path.

Patch Changes

• #2040 88f2abb Thanks @​bluwy! - Improve type-check for options object

• #2160 162419d Thanks @​beeequeue! - Added or modified the files property in the manifest. This should not change any behavior.

• #1947 492b0ca Thanks @​bluwy! - Use parseEnv instead of dotenv to load the .env file and avoid loading them to process.env

• Updated dependencies [5b02e2f, 062530b, 88f2abb, dae394c, dae394c, df424a4, b5e1762, c19b112, 162419d, 4c26f2f, 96b65ee, 813bbf3, df424a4, a0b5326, 492b0ca]:

  • @​changesets/get-github-info@​1.0.0
  • @​changesets/types@​7.0.0

@​changesets/changelog-github@​1.0.0-next.9

Patch Changes

• Updated dependencies [96b65ee]:
  • @​changesets/types@​7.0.0-next.9

@​changesets/changelog-github@​1.0.0-next.3

Major Changes

• #1954 ed6728c Thanks @​beeequeue! - Bumped supported Node versions to ^22.11 || ^24 || >=26

Minor Changes

• #1969 2c7c043 Thanks @​marcalexiei! - Add a named export that mirrors the current default export

  The default export is slated for removal in the next major release, so this ensures a smoother transition path.

... (truncated)

Changelog

Sourced from @​changesets/changelog-github's changelog.

1.0.1

Patch Changes

• Updated dependencies [4d7b4fb]:
  • @​changesets/get-github-info@​1.0.1

1.0.0

Major Changes

• #1482 df424a4 Thanks @​Andarist! - Bumped supported Node versions to ^22.11 || ^24 || >=26

• #1482 df424a4 Thanks @​Andarist! - From now on this package is going to be published as ES module.

Minor Changes

• #2059 070f531 Thanks @​jycouet! - Add an opt-in, experimental template option to render changelog lines from tokens ({summary}, {ref}, {pull}, {commit}, {authors}). Default output is unchanged. The token syntax may change in a patch release; pin the version if you rely on it.

• #1871 dfefc4e Thanks @​mihkeleidast! - Use GITHUB_REPOSITORY as the default repo when no repo option is configured

• #1969 2c7c043 Thanks @​marcalexiei! - Add a named export that mirrors the current default export

  The default export is slated for removal in the next major release, so this ensures a smoother transition path.

Patch Changes

• #2040 88f2abb Thanks @​bluwy! - Improve type-check for options object

• #2160 162419d Thanks @​beeequeue! - Added or modified the files property in the manifest. This should not change any behavior.

• #1947 492b0ca Thanks @​bluwy! - Use parseEnv instead of dotenv to load the .env file and avoid loading them to process.env

• Updated dependencies [5b02e2f, 062530b, 88f2abb, dae394c, dae394c, df424a4, b5e1762, c19b112, 162419d, 4c26f2f, 96b65ee, 813bbf3, df424a4, a0b5326, 492b0ca]:

  • @​changesets/get-github-info@​1.0.0
  • @​changesets/types@​7.0.0

1.0.0-next.9

Patch Changes

• Updated dependencies [96b65ee]:
  • @​changesets/types@​7.0.0-next.9

1.0.0-next.8

Patch Changes

• Updated dependencies [b5e1762]:
  • @​changesets/types@​7.0.0-next.8

... (truncated)

Commits

• d7e4a2d Version Packages (#2266)
• f442221 Version Packages (#2235)
• baa658d Version Packages (next) (#2192)
• 1b9687f Add new docs site (#1979)
• 7fd0d91 Version Packages (next) (#2173)
• 180833e Version Packages (next) (#2142)
• 162419d add or modify files (#2160)
• c35c350 Version Packages (next) (#2122)
• 070f531 Add template option to changelog-github (#2059)
• dfefc4e Use GITHUB_REPOSITORY as the default repo when no repo option is configur...
• Additional commits viewable in compare view

Updates @changesets/cli from 3.0.2 to 3.0.3

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​3.0.3

Patch Changes

• #2297 3f163da Thanks @​Andarist! - Fixed semver ranges (such as >=1.0.0 <2.0.0) getting cut off (>=2.0.0) when updating internal dependencies.

• #2276 ca9d110 Thanks @​Andarist! - Fixed pnpm 10 compatibility with npm 12 when reading registry information, packing, and publishing packages.

• Updated dependencies [3f163da, bfe9050, e522996]:

  • @​changesets/apply-release-plan@​8.1.1
  • @​changesets/config@​4.0.1

Changelog

Sourced from @​changesets/cli's changelog.

3.0.3

Patch Changes

• #2297 3f163da Thanks @​Andarist! - Fixed semver ranges (such as >=1.0.0 <2.0.0) getting cut off (>=2.0.0) when updating internal dependencies.

• #2276 ca9d110 Thanks @​Andarist! - Fixed pnpm 10 compatibility with npm 12 when reading registry information, packing, and publishing packages.

• Updated dependencies [3f163da, bfe9050, e522996]:

  • @​changesets/apply-release-plan@​8.1.1
  • @​changesets/config@​4.0.1

Commits

• c9269c0 Version Packages (#2291)
• ca9d110 Fix pnpm 10 publishing with npm 12 (#2276)
• 7be7fde Build(deps): Bump the production-dependencies group across 1 directory with 6...
• b430ce0 Move e2e tests to an on-demand workspace (#2275)
• 93314a8 test: add happy path tests for add (#2289)
• d13a39e test: use inline snapshots for publish plan tests (#2284)
• See full diff in compare view

Updates @types/bun from 1.3.14 to 1.4.2

Commits

• See full diff in compare view

Updates knip from 6.31.0 to 6.41.0

Release notes

Sourced from knip's releases.

Release 6.41.0

• Add Flue plugin (#2124) (c52737d45ff008d6d96d4c2d4182048a2aa64602) - thanks @​LuisFigueroaG!
• Match all React Native config file extensions (#2125) (898fdffb37ae0bdb3d2653038eb10c2e01edf983) - thanks @​LuisFigueroaG!
• Consolidate fixture guidance and extend plugin guidelines (37a4ca04645f71f599e9b530676543f9893bd641)
• Add AI contribution policy (b15f0fbb090ea0427240880da2bec602c11cea50)
• Use files from tsconfig references with --use-tsconfig-files (#2126) (9618185eafb0c5cb365035f89e9d66718642338a) - thanks @​kaanisthatyou!
• Compile gitignore walk patterns once (resolve #2127) (09c80299779fa5abe133ee8f82051c25870007b8)
• Drop readdir order dependent case from gitignore walk test (ab3da8ff95a05a0fbfba6873b64559017d038aa7)
• fix: recognize binaries from absent optional dependencies (#2120) (d908556eaa98bf9637a2744d2de089bab31b8dbc) - thanks @​DreamLongYT!
• Apply a directory's .gitignore before walking its subdirectories (9560c07862d4c72dc956371b9a77e049d83ed4a9)
• Apply nested .gitignore files to workspace globs (23d35421dd67c405254f2f8bcbc09b18d224e338)
• Update gitignore matcher and walk notes (499f85f4544457dc7c51c4a7612fea69773ef3dd)
• Keep the cwd out of glob patterns and matchers (#2107) (1e82fb807c88cc46951f2028214569f9a2eb0061) - thanks @​kaanisthatyou!
• Support function configs in Rsbuild plugin (#2122) (38071db87e9023e5dd61173ce32f9020a1a5d7ff) - thanks @​bytedoe!
• Separate Expo Router plugin; remove expo-router entry points from Expo plugin (#2128) (ad541764ca7d3c062236661677d1d66d5275122f) - thanks @​jjjjonathan!
• Link Expo config discovery source and fold expo6 fixture into expo-router (2ddeca50956790b10580e835df50bc980cce961d)
• Update dependencies (c9f79148f7165314a7b3c801eff926d1d0d6b060)
• Migrate shell script parsing to unbash v5 (4942cca05303410120a007a5bb23b0c2da725da1)
• Handle updated Formatly result types (ca9e8315e003dae69646f7500fa98ab9ed403b92)
• Preserve TypeScript 5.0 compatibility in shell AST filters (957ac7bbd654f6d3d0c4dc4eab2f4aa133ff0b4b)
• Point timerify crashes to the Node.js version that fixes them (0c235de096fd3361eb918d1290241fa32a62f089)
• Copy importer identifier sets into the reverse index (2860d678a87dddb5ad56299119fb6e108ceffa12)
• Clear the resolver cache at the start of a run (10b5bb82ecd03c88b68ace58a7aea23d188cc5f1)

Release 6.40.0

• Resolve local and scope-only extends in commitlint plugin (#2079) (e667552d4e7122094565d3ad9ae407acfc0ac684) - thanks @​giaBaoJS!
• Clarify worktree guides and plugin review preparation (dd02baf020d23af1d47c44c1a726a61014b270bd)
• Document stale cache results and workarounds (#2078) (3573749a5d5bbee6305f207cc7d1b72c200c8c9b)
• Exclude test files from package entries in production mode (resolve #2082) (b86f45f9d38d4b83baad98e43983e08910e00c78) - thanks @​jonathanong!
• Resolve Serverless file variables in plugins and functions (resolve #2074) (99cac789694ea8d76cd38184d2d7c95f34315224) - thanks @​SwastikTripathi!
• Preserve locally referenced namespace members (resolve #2070) (f0f36df766cd74ad7ae03fbf8940bdeb792439be) - thanks @​MFA-G!
• fix: add the commitlint-plugin prefix to Commitlint plugin names (#2096) (3decd35ff0a4220c7cd2c9142dc69c89794b3927) - thanks @​devYRPauli!
• fix: match .mjs config files in the simple-git-hooks plugin (#2097) (79a87d92396c2444ae4ef3c780c0d2e18cd73e4c) - thanks @​devYRPauli!
• fix: match capacitor.config.js in the Capacitor plugin (#2098) (4a5ec96d818117a7f2eafa027e3b707bc97573a8) - thanks @​devYRPauli!
• fix(typescript): ArrayExpression (#2099) (#2100) (87fea9f201c2fd864eafa31bdad68910a8a177ba) - thanks @​DreamLongYT!
• Preserve development entry pattern groups (7c229f4e1918075d801ed3b046fa022b1d3bcc41)
• Resolve null package exports to the files they hide (resolve #2084, close #2085) (5bd46260feb60b957c2631bc72375ef192e441e0)
• Pin InvokeAI ecosystem test (4e0a3432eb35e3f628f6d3b7fcd14b942de343d0)
• fix(utils): add jsx extension to source mapping (#2087) (eaa353b5fc30c2f12cdf2c29e6dd68e0d0950062) - thanks @​DreamLongYT!
• fix(serverless-framework): handle explicit extensions in handler paths (#2091) (e9393965be7563640921e3f20c946fcb9132e1cb) - thanks @​DreamLongYT!
• Annotate published manifest return type (d95a8310a0d0dca8f23d8dd3f83e7b0a1909d038)
• Add Jasmine plugin (#2105) (9ed14911d5c5752aef36878ab3d515c35d1ac6bc) - thanks @​SulimanAbdulrazzaq!
• fix: resolve workspace exports with fallback arrays (#2088) (49c2aaeaba4544f25cc02c19d5da5152a8ef68c3) - thanks @​DreamLongYT!
• fix(postcss): ignore disabled plugins in object configs (#2092) (b84fdf8a8ee676ee45f4313009ebfe969d034a88) - thanks @​DreamLongYT!
• Resolve webServer commands in Playwright plugin (#2110) (1af96bce36b0d0d07791de100c7f2ea5672a478c) - thanks @​everton-dgn!
• Cache config file inputs per plugin (#2109) (01cb43267ca5dc03a2cbcba0a19fd891d4ed1f37) - thanks @​everton-dgn!
• fix: include custom compiler extensions in source path mapping (#2090) (dc3a47e2d810808314454b8f5c23070f136d15d3) - thanks @​DreamLongYT!
• Don't let a self-closing swallow the next (#2113) (989fdadde0a068d1d1c52e26a8327b99c5de0668) - thanks @​maniflopi!
• fix(oxlint): resolve lint from loaded Vite config (#2108) (6d44e532ed6320cdf4f4c3253b26e155c4d26ba7) - thanks @​everton-dgn!
• fix: resolve Jest module names without the jest-* prefix (#2095) (a5f4cfbff7f263a0ea8d5461a3f9216cbef38602) - thanks @​devYRPauli!

... (truncated)

Commits

• 13d7f21 Release knip@6.41.0
• 10b5bb8 Clear the resolver cache at the start of a run
• 2860d67 Copy importer identifier sets into the reverse index
• 0c235de Point timerify crashes to the Node.js version that fixes them
• 957ac7b Preserve TypeScript 5.0 compatibility in shell AST filters
• ca9e831 Handle updated Formatly result types
• 4942cca Migrate shell script parsing to unbash v5
• c9f7914 Update dependencies
• 2ddeca5 Link Expo config discovery source and fold expo6 fixture into expo-router
• ad54176 Separate Expo Router plugin; remove expo-router entry points from Expo plugin...
• Additional commits viewable in compare view

Updates turbo from 2.10.8 to 2.11.7

Release notes

Sourced from turbo's releases.

Turborepo v2.11.7

What's Changed

Changelog

• chore: Release Turborepo 2.11.6 by @​github-actions[bot] in vercel/turborepo#14352
• fix: Pass SDKROOT through to repository tasks by @​anthonyshew in vercel/turborepo#14353
• chore: Update with-vite-module-federation example by @​vercel-gh-bot-5[bot] in vercel/turborepo#14349
• fix: Ignore Vercel OIDC token rotation in .env.local cache inputs by @​anthonyshew in vercel/turborepo#14356

Full Changelog: vercel/turborepo@v2.11.6...v2.11.7

Turborepo v2.11.6

What's Changed

Changelog

• chore: Release Turborepo 2.11.5 by @​github-actions[bot] in vercel/turborepo#14329
• fix: Upgrade standalone turbo on installer reruns by @​anthonyshew in vercel/turborepo#14330
• test: Deflake OpenTelemetry and PTY shutdown tests by @​anthonyshew in vercel/turborepo#14331
• docs: Document standalone turbo installation by @​anthonyshew in vercel/turborepo#14332
• ci: Install standalone turbo on Windows with PowerShell by @​anthonyshew in vercel/turborepo#14334
• fix: Keep Yarn patch resolutions with npm protocol selectors in prune by @​anthonyshew in vercel/turborepo#14337
• chore: Update with-tailwind example by @​vercel-gh-bot-5[bot] in vercel/turborepo#14264
• ci: Resolve latest turbo release with workflow token by @​anthonyshew in vercel/turborepo#14339
• chore: Update with-ultracite example by @​vercel-gh-bot-5[bot] in vercel/turborepo#14335
• fix: Match production MFE negative lookaheads locally by @​kitfoster in vercel/turborepo#13496
• docs: Add missing system environment variables and run flags by @​BABTUNA in vercel/turborepo#13811
• fix: Normalize task inputs consistently for affected detection and hashing by @​anthonyshew in vercel/turborepo#14341
• feat: Add task tags with configuration inheritance by @​anthonyshew in vercel/turborepo#14342
• fix: Upgrade brace-expansion to latest compatible releases by @​anthonyshew in vercel/turborepo#14347
• docs: Point security.txt to Vercel HackerOne program by @​swarnava in vercel/turborepo#14346
• test: Deflake untracked scan-scope assertions by @​anthonyshew in vercel/turborepo#14348
• feat: Expose task and package tags in query by @​anthonyshew in vercel/turborepo#14343
• feat: Filter query tasks and packages by tags by @​anthonyshew in vercel/turborepo#14344
• feat: Filter tasks by tags in the CLI by @​anthonyshew in vercel/turborepo#14345
• fix: Complete task query metadata for non-script entrypoints by @​anthonyshew in vercel/turborepo#14350
• fix: Infer single-package mode for query commands by @​anthonyshew in vercel/turborepo#14351

New Contributors

• @​swarnava made their first contribution in vercel/turborepo#14346

Full Changelog: vercel/turborepo@v2.11.5...v2.11.6

Turborepo v2.11.5

What's Changed

Changelog

... (truncated)

Commits

• 547747f publish 2.11.7 to registry
• 3ce82f5 fix: Ignore Vercel OIDC token rotation in .env.local cache inputs (#14356)
• 8cc3cce chore: Update with-vite-module-federation example (#14349)
• 41387de fix: Pass SDKROOT through to repository tasks (#14353)
• 3a2072c chore: Release Turborepo 2.11.6 (#14352)
• 90718d1 fix: Infer single-package mode for query commands (#14351)
• a409ce5 fix: Complete task query metadata for non-script entrypoints (#14350)
• bc7c148 feat: Filter tasks by tags in the CLI (#14345)
• 49d1607 feat: Filter query tasks and packages by tags (#14344)
• fba5351 feat: Expose task and package tags in query (#14343)
• Additional commits viewable in compare view

Updates `@elect...

Description has been truncated

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.