Skip to content

build(deps-dev): bump @biomejs/biome from 2.4.13 to 2.4.14 in the typescript-tooling group across 1 directory#55

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/typescript-tooling-46e95d6caa
Closed

build(deps-dev): bump @biomejs/biome from 2.4.13 to 2.4.14 in the typescript-tooling group across 1 directory#55
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/typescript-tooling-46e95d6caa

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 4, 2026

Bumps the typescript-tooling group with 1 update in the / directory: @biomejs/biome.

Updates @biomejs/biome from 2.4.13 to 2.4.14

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.4.14

2.4.14

Patch Changes

  • #9393 491b171 Thanks @​dyc3! - Added the nursery rule useTestHooksOnTop in the test domain. The rule flags lifecycle hooks (beforeEach, beforeAll, afterEach, afterAll) that appear after test cases in the same block, enforcing that hooks are defined before any test case.

  • #10157 eefc5ab Thanks @​dyc3! - Fixed #7882: The HTML parser will now emit better diagnostics when it encounters a void element with a closing tag, such as <br></br>. Previously, the parser would emit multiple diagnostics with conflicting advice. Now it emits a single diagnostic that clearly states that void elements should not have closing tags.

  • #10054 0e9f569 Thanks @​minseong0324! - noMisleadingReturnType no longer misses widening from concrete object types, class instances, object literals, tuples, functions, and regular expressions to : object.

    A function annotated : object returning an object literal:

    function f(): object {
      return { retry: true };
    }
  • #10116 53269eb Thanks @​jiwon79! - Fixed #6201: noUselessEscapeInRegex no longer flags an escaped backslash followed by - as a useless escape. Patterns like /[\\-]/ are now considered valid because the second \ is the escaped backslash, not an unnecessary escape of the trailing dash.

  • #10092 33d8543 Thanks @​Conaclos! - Fixed #9097: organizeImports no longer adds a blank line between a never-matched group and a matched group.

    Given the following organizeImports options:

    {
      "groups": [":NODE:", ":BLANK_LINE:", ":PACKAGE:", ":BLANK_LINE:", ":PATH:"]
    }

    The following code...

    // Comment
    import "package";
    import "./file.js";

    ...was organized as:

    +
      // Comment
      import "package";
    +
      import "./file.js";

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.4.14

Patch Changes

  • #9393 491b171 Thanks @​dyc3! - Added the nursery rule useTestHooksOnTop in the test domain. The rule flags lifecycle hooks (beforeEach, beforeAll, afterEach, afterAll) that appear after test cases in the same block, enforcing that hooks are defined before any test case.

  • #10157 eefc5ab Thanks @​dyc3! - Fixed #7882: The HTML parser will now emit better diagnostics when it encounters a void element with a closing tag, such as <br></br>. Previously, the parser would emit multiple diagnostics with conflicting advice. Now it emits a single diagnostic that clearly states that void elements should not have closing tags.

  • #10054 0e9f569 Thanks @​minseong0324! - noMisleadingReturnType no longer misses widening from concrete object types, class instances, object literals, tuples, functions, and regular expressions to : object.

    A function annotated : object returning an object literal:

    function f(): object {
      return { retry: true };
    }
  • #10116 53269eb Thanks @​jiwon79! - Fixed #6201: noUselessEscapeInRegex no longer flags an escaped backslash followed by - as a useless escape. Patterns like /[\\-]/ are now considered valid because the second \ is the escaped backslash, not an unnecessary escape of the trailing dash.

  • #10092 33d8543 Thanks @​Conaclos! - Fixed #9097: organizeImports no longer adds a blank line between a never-matched group and a matched group.

    Given the following organizeImports options:

    {
      "groups": [":NODE:", ":BLANK_LINE:", ":PACKAGE:", ":BLANK_LINE:", ":PATH:"]
    }

    The following code...

    // Comment
    import "package";
    import "./file.js";

    ...was organized as:

    +
      // Comment
      import "package";
    +
      import "./file.js";

    A blank line was added even though the group ':NODE:' doesn't match any imports here. :BLANK_LINE: between never-matched groups and matched groups are now ignored.

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 4, 2026
Bumps the typescript-tooling group with 1 update in the / directory: [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome).


Updates `@biomejs/biome` from 2.4.13 to 2.4.14
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.14/packages/@biomejs/biome)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.4.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: typescript-tooling
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps-dev): bump @biomejs/biome from 2.4.13 to 2.4.14 in the typescript-tooling group build(deps-dev): bump @biomejs/biome from 2.4.13 to 2.4.14 in the typescript-tooling group across 1 directory May 6, 2026
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/typescript-tooling-46e95d6caa branch from 8704ce2 to e657bec Compare May 6, 2026 03:34
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 8, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/npm_and_yarn/typescript-tooling-46e95d6caa branch May 8, 2026 13:32
theagenticguy added a commit that referenced this pull request May 10, 2026
## Summary

One PR that takes in all 10 open Dependabot bumps so pnpm-lock only has
to resolve once. All versions match the Dependabot PRs exactly. Bumps
are drops-in — no code changes needed.

### Closes

- Closes #67 — `@aws-sdk/client-sagemaker-runtime` 3.1035.0 → 3.1043.0
(`packages/embedder`)
- Closes #66 — `fast-xml-parser` 5.7.2 → 5.7.3 (`packages/ingestion`)
- Closes #65 — `@aws-sdk/client-bedrock-runtime` 3.1040.0 → 3.1043.0
(`packages/ingestion`, `summarizer`, `wiki`)
- Closes #63 — `lru-cache` 11.3.5 → 11.3.6 (`packages/mcp`)
- Closes #62 — `yaml` 2.8.3 → 2.8.4 (`packages/frameworks`, `sarif`,
`cli`, `policy`)
- Closes #60 — `@commitlint/config-conventional` 20.5.0 → 20.5.3 (root
devDep)
- Closes #59 — `zod` 4.3.6 → 4.4.3 (`packages/frameworks`, `mcp`,
`sarif`, `policy`, `summarizer`)
- Closes #57 — `snyk-nodejs-lockfile-parser` 2.7.0 → 2.7.1
(`packages/ingestion`)
- Closes #56 — `onnxruntime-node` 1.24.3 → 1.25.1 (`packages/embedder`)
- Closes #55 — `@biomejs/biome` 2.4.13 → 2.4.14 (root devDep)

Mise pins (`node = "22"`, `pnpm = "10.33.2"`, `python = "3.12"`, `uv =
"latest"`) left alone — none of the Dependabot PRs touch them and a pnpm
10→11 jump would be a major change out of scope.

## Test plan

- [x] `pnpm install` resolves cleanly, lockfile regenerates without
workarounds
- [x] `pnpm -r clean && pnpm -r build` succeeds (all workspace packages
build)
- [x] `pnpm -r exec tsc --noEmit` passes (14 stale-`dist` errors in
`packages/search` were pre-existing on main before a fresh build and
clear after)
- [x] `pnpm -r test` passes (225 CLI tests + 150 MCP tests + rest; the 2
earlier MCP failures were stale `dist/tools/pack-codebase.test.js`
leftovers from a prior branch's build and disappeared after `pnpm -r
clean`)
- [x] `pnpm run lint` passes (biome 2.4.14 surfaces 6 warnings / 1 info
on existing test code, non-blocking)
- [x] `pnpm run banned-strings` passes
- [x] `lefthook` pre-commit + commit-msg + pre-push hooks all green

## Notes

- Root `pnpm.onlyBuiltDependencies` was **not** touched by this change —
preserved `onnxruntime-node`, `@duckdb/node-api`, tree-sitter natives,
etc. exactly as they were.
- The `fast-xml-parser@<5.7.0: 5.7.1` override is still in
`package.json` for transitive resolution of older versions — left
intact.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants