chore(deps-dev): bump the npm group with 5 updates by dependabot[bot] · Pull Request #821 · hexlet-basics/exercises-javascript

dependabot · 2026-05-29T16:22:11Z

Bumps the npm group with 5 updates:

Package	From	To
@biomejs/biome	`2.1.4`	`2.4.16`
globals	`16.3.0`	`17.6.0`
npm-check-updates	`18.0.2`	`22.2.1`
typescript	`5.9.2`	`6.0.3`
vitest	`3.2.4`	`4.1.7`

Updates @biomejs/biome from 2.1.4 to 2.4.16

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.4.16

2.4.16

Patch Changes
#10329 ef764d5 Thanks @Conaclos! - Fixed an issue where diagnostics showed an incorrect location in Astro files.
#10363 50aa415 Thanks @dyc3! - Fixed HTML formatting for a case where comments could cause the formatter to split up a closing tag, which would cause the resulting HTML to be syntactically invalid.

Input:
ab
Output:
  a</span >bab
#10465 0c718da Thanks @dfedoryshchev! - Fixed diagnostics emitted by the noUntrustedLicenses rule.

#10358 05c2617 Thanks @dyc3! - Fixed #10356: biome rage --linter now displays rules enabled through linter domains in the enabled rules list.

#10300 950247c Thanks @dyc3! - Fixed #10265: Svelte function bindings such as bind:value={get, set} are now parsed more precisely, so noCommaOperator won't emit false positives for that syntax anymore.

#9786 e71f584 Thanks @MeGaNeKoS! - Fixed #8480: useDestructuring now provides variableDeclarator and assignmentExpression options to control which contexts enforce destructuring, matching ESLint's prefer-destructuring configuration. Both default to {array: true, object: true}. The diagnostic for object destructuring in assignment expressions now instructs users to wrap the assignment in parentheses.

#10425 1948b72 Thanks @sjh9714! - Fixed #10244: The useOptionalChain rule now detects negated guard inequality chains like !foo || foo.bar !== "x".

#10442 001f94f Thanks @ematipico! - Fixed #10411: noMisusedPromises no longer causes a stack overflow when a nested function returns an object with shorthand properties that shadow destructured variables from an outer scope.

#10318 9b1577f Thanks @dyc3! - Added support for formatter.trailingCommas in overrides. This option was previously available in the top-level formatter configuration but missing from formatter overrides.

#10319 2e37709 Thanks @dyc3! - Fixed Vue and Svelte formatting for standalone interpolations in inline elements. Biome now preserves existing newlines in cases like:

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.4.16

Patch Changes
#10329 ef764d5 Thanks @Conaclos! - Fixed an issue where diagnostics showed an incorrect location in Astro files.
#10363 50aa415 Thanks @dyc3! - Fixed HTML formatting for a case where comments could cause the formatter to split up a closing tag, which would cause the resulting HTML to be syntactically invalid.

Input:
ab
Output:
  a</span >bab
#10465 0c718da Thanks @dfedoryshchev! - Fixed diagnostics emitted by the noUntrustedLicenses rule.

#10358 05c2617 Thanks @dyc3! - Fixed #10356: biome rage --linter now displays rules enabled through linter domains in the enabled rules list.

#10300 950247c Thanks @dyc3! - Fixed #10265: Svelte function bindings such as bind:value={get, set} are now parsed more precisely, so noCommaOperator won't emit false positives for that syntax anymore.

#9786 e71f584 Thanks @MeGaNeKoS! - Fixed #8480: useDestructuring now provides variableDeclarator and assignmentExpression options to control which contexts enforce destructuring, matching ESLint's prefer-destructuring configuration. Both default to {array: true, object: true}. The diagnostic for object destructuring in assignment expressions now instructs users to wrap the assignment in parentheses.

#10425 1948b72 Thanks @sjh9714! - Fixed #10244: The useOptionalChain rule now detects negated guard inequality chains like !foo || foo.bar !== "x".

#10442 001f94f Thanks @ematipico! - Fixed #10411: noMisusedPromises no longer causes a stack overflow when a nested function returns an object with shorthand properties that shadow destructured variables from an outer scope.

#10318 9b1577f Thanks @dyc3! - Added support for formatter.trailingCommas in overrides. This option was previously available in the top-level formatter configuration but missing from formatter overrides.
#10319 2e37709 Thanks @dyc3! - Fixed Vue and Svelte formatting for standalone interpolations in inline elements. Biome now preserves existing newlines in cases like:

... (truncated)

Commits

5f4ea56 ci: release (#10326)
de2a33c fix(core): regression in emitted types (#10478)
d835303 docs: remove redundant default phrase in useConsistentObjectDefinitions rul...
4f1aaf2 fix: incorrect build when using build or test (#10426)
dc73b6b refactor: make plugins opt-in via feature gate (#10418)
e71f584 feat(useDestructuring): add options for assignment/declaration and improve di...
9b1577f fix(config): support trailingCommas in overrides (#10318)
9dd3271 ci: release (#10210)
7b8d4e1 feat(lint/html/vue): add useVueValidVFor (#10195)
ba3480e feat(lint/js): add useTestHooksInOrder (#9394)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @biomejs/biome since your current version.

Updates globals from 16.3.0 to 17.6.0

Release notes

Sourced from globals's releases.

v17.6.0

Update globals (2026-05-01) (#343) 00a4dd9

sindresorhus/globals@v17.5.0...v17.6.0

v17.5.0

Update globals (2026-04-12) (#342) 5d84602

sindresorhus/globals@v17.4.0...v17.5.0

v17.4.0

Update globals (2026-03-01) (#338) d43a051

sindresorhus/globals@v17.3.0...v17.4.0

v17.3.0

Update globals (2026-02-01) (#336) 295fba9

sindresorhus/globals@v17.2.0...v17.3.0

v17.2.0

jasmine: Add throwUnless and throwUnlessAsync globals (#335) 97f23a7

sindresorhus/globals@v17.1.0...v17.2.0

v17.1.0

Add webpack and rspack globals (#333) 65cae73

sindresorhus/globals@v17.0.0...v17.1.0

v17.0.0

Breaking

Split audioWorklet environment from browser (#320) 7bc293e

Improvements

Update globals (#329) ebe1063

... (truncated)

Commits

6b15870 17.6.0
00a4dd9 Update globals (2026-05-01) (#343)
b8170c8 17.5.0
5d84602 Update globals (2026-04-12) (#342)
1b727e5 Fix build script for ES globals (#341)
a9cfd74 17.4.0
d43a051 Update globals (2026-03-01) (#338)
5edc602 17.3.0
295fba9 Update globals (2026-02-01) (#336)
8176ac7 17.2.0
Additional commits viewable in compare view

Updates npm-check-updates from 18.0.2 to 22.2.1

Release notes

Sourced from npm-check-updates's releases.

v22.2.1

What's Changed

build(deps-dev): bump @typescript-eslint/eslint-plugin by @dependabot[bot] in raineorshine/npm-check-updates#1727

build(deps-dev): bump verdaccio from 6.5.2 to 6.6.0 by @dependabot[bot] in raineorshine/npm-check-updates#1728

build(deps-dev): bump yaml from 2.8.4 to 2.9.0 by @dependabot[bot] in raineorshine/npm-check-updates#1729

fix: normalize blank-line spacing between packages in --deep mode by @terminalchai in raineorshine/npm-check-updates#1738

Fix TypeError when running ncu from a subdirectory without a package.json by @Copilot in raineorshine/npm-check-updates#1737

build(deps-dev): bump semver from 7.7.4 to 7.8.0 by @dependabot[bot] in raineorshine/npm-check-updates#1731

build(deps-dev): bump ini from 6.0.0 to 7.0.0 by @dependabot[bot] in raineorshine/npm-check-updates#1726

build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.59.3 to 8.59.4 by @dependabot[bot] in raineorshine/npm-check-updates#1739

build(deps-dev): bump vite from 8.0.9 to 8.0.13 by @dependabot[bot] in raineorshine/npm-check-updates#1740

build(deps-dev): bump tsx from 4.21.0 to 4.22.3 by @dependabot[bot] in raineorshine/npm-check-updates#1741

build(deps-dev): bump @typescript-eslint/parser from 8.59.3 to 8.59.4 by @dependabot[bot] in raineorshine/npm-check-updates#1743

build(deps-dev): bump @types/node from 25.6.0 to 25.9.1 by @dependabot[bot] in raineorshine/npm-check-updates#1744

build(deps-dev): bump vite-plugin-dts from 4.5.4 to 5.0.0 by @dependabot[bot] in raineorshine/npm-check-updates#1713

build(deps-dev): bump @eslint/compat from 2.0.5 to 2.1.0 by @dependabot[bot] in raineorshine/npm-check-updates#1732

Full Changelog: raineorshine/npm-check-updates@v22.2.0...v22.2.1

v22.2.0

What's Changed

build(deps): bump fast-uri from 3.1.0 to 3.1.2 by @dependabot[bot] in raineorshine/npm-check-updates#1724

feat: add cooldown format and improved visibility for skipped updates by @onemen in raineorshine/npm-check-updates#1711

Full Changelog: raineorshine/npm-check-updates@v22.1.1...v22.2.0

v22.1.1

What's Changed

npm: decorateTagPackumentWithTimeAndName accepts undefined tagPackument by @SAY-5 in raineorshine/npm-check-updates#1706

fix: skip intersects() for non-semver specs like catalog: in peer dep checks by @terminalchai in raineorshine/npm-check-updates#1710

Bump yaml from 2.8.3 to 2.8.4 by @dependabot[bot] in raineorshine/npm-check-updates#1714

Bump @typescript-eslint/eslint-plugin from 8.59.1 to 8.59.2 by @dependabot[bot] in raineorshine/npm-check-updates#1716

Bump @typescript-eslint/parser from 8.59.1 to 8.59.2 by @dependabot[bot] in raineorshine/npm-check-updates#1718

build(deps-dev): bump eslint-plugin-n from 17.24.0 to 18.0.1 by @dependabot[bot] in raineorshine/npm-check-updates#1715

build(deps-dev): bump zod from 4.3.6 to 4.4.3 by @dependabot[bot] in raineorshine/npm-check-updates#1719

build(deps-dev): bump globals from 17.5.0 to 17.6.0 by @dependabot[bot] in raineorshine/npm-check-updates#1717

build(deps-dev): bump hosted-git-info from 9.0.2 to 9.0.3 by @dependabot[bot] in raineorshine/npm-check-updates#1720

New Contributors

@SAY-5 made their first contribution in raineorshine/npm-check-updates#1706

Full Changelog: raineorshine/npm-check-updates@v22.1.0...v22.1.1

v22.1.0

What's Changed

fix: make --dep and --format robust to PowerShell arg rewriting (comma-or-space-delimited) by @onemen in raineorshine/npm-check-updates#1694

Bump @typescript-eslint/eslint-plugin from 8.59.0 to 8.59.1 by @dependabot[bot] in raineorshine/npm-check-updates#1697

Bump eslint-plugin-promise from 7.2.1 to 7.3.0 by @dependabot[bot] in raineorshine/npm-check-updates#1702

... (truncated)

Commits

0b5e4fe 22.2.1
7824c50 Install missing @microsoft/api-extractor needed by dts plugin.
06ffaa1 build(deps-dev): bump @eslint/compat from 2.0.5 to 2.1.0 (#1732)
b6eb3fc build(deps-dev): bump vite-plugin-dts from 4.5.4 to 5.0.0 (#1713)
348c543 build(deps-dev): bump @types/node from 25.6.0 to 25.9.1 (#1744)
2f3c7a6 build(deps-dev): bump @typescript-eslint/parser from 8.59.3 to 8.59.4 (#1743)
3772ec3 build(deps-dev): bump tsx from 4.21.0 to 4.22.3 (#1741)
bd40b96 build(deps-dev): bump vite from 8.0.9 to 8.0.13 (#1740)
7983134 build(deps-dev): bump @typescript-eslint/eslint-plugin from 8.59.3 to 8.59.4 ...
ccb1e6c build(deps-dev): bump ini from 6.0.0 to 7.0.0 (#1726)
Additional commits viewable in compare view

Updates typescript from 5.9.2 to 6.0.3

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

fixed issues query for TypeScript 6.0.0 (Beta).

fixed issues query for TypeScript 6.0.1 (RC).

fixed issues query for TypeScript 6.0.2 (Stable).

fixed issues query for TypeScript 6.0.3 (Stable).

Downloads are available on:

npm

TypeScript 6.0

For release notes, check out the release announcement blog post.

fixed issues query for TypeScript 6.0.0 (Beta).

fixed issues query for TypeScript 6.0.1 (RC).

fixed issues query for TypeScript 6.0.2 (Stable).

Downloads are available on:

npm

TypeScript 6.0 Beta

For release notes, check out the release announcement.

fixed issues query for Typescript 6.0.0 (Beta).

Downloads are available on:

npm

TypeScript 5.9.3

Note: this tag was recreated to point at the correct commit. The npm package contained the correct content.

For release notes, check out the release announcement

fixed issues query for Typescript 5.9.0 (Beta).

fixed issues query for Typescript 5.9.1 (RC).

No specific changes for TypeScript 5.9.2 (Stable)

fixed issues query for Typescript 5.9.3 (Stable).

Downloads are available on:

npm

Commits

050880c Bump version to 6.0.3 and LKG
eeae9dd 🤖 Pick PR #63401 (Also check package name validity in...) into release-6.0 (#...
ad1c695 🤖 Pick PR #63368 (Harden ATA package name filtering) into release-6.0 (#63372)
0725fb4 🤖 Pick PR #63310 (Mark class property initializers as...) into release-6.0 (#...
607a22a Bump version to 6.0.2 and LKG
9e72ab7 🤖 Pick PR #63239 (Fix missing lib files in reused pro...) into release-6.0 (#...
35ff23d 🤖 Pick PR #63163 (Port anyFunctionType subtype fix an...) into release-6.0 (#...
e175b69 Bump version to 6.0.1-rc and LKG
af4caac Update LKG
8efd7e8 Merge remote-tracking branch 'origin/main' into release-6.0
Additional commits viewable in compare view

Updates vitest from 3.2.4 to 4.1.7

Release notes

Sourced from vitest's releases.

v4.1.7

   🐞 Bug Fixes

runner: Limit concurrency per task branch in addition to per leaf callbacks (backport) - by @hi-ogawa in vitest-dev/vitest#10384 (4f0f2)

    View changes on GitHub

v4.1.6

   🐞 Bug Fixes

browser: Provide project reference in ToMatchScreenshotResolvePath - by @macarie and @sheremet-va in vitest-dev/vitest#10138 (31882)

Global sequence.concurrent: true with top-level test(..., { concurrent: false }) + depreacte sequential test API and options - by @hi-ogawa, Codex and @sheremet-va in vitest-dev/vitest#10196 (2847d)

browser: Simplify orchestrator otel carrier - by @hi-ogawa in vitest-dev/vitest#10285 (18af9)

   🏎 Performance

Stringify diff objects only once - by @sheremet-va in vitest-dev/vitest#10276 (9f7b1)

    View changes on GitHub

v4.1.5

   🚀 Experimental Features

coverage: Istanbul to support instrumenter option - by @BartWaardenburg and @AriPerkkio in vitest-dev/vitest#10119 (0e0ff)

   🐞 Bug Fixes

--project negation excludes browser instances - by @felamaslen in vitest-dev/vitest#10131 (9423d)

Project color label on html reporter - by @hi-ogawa in vitest-dev/vitest#10142 (596f7)

Fix vi.defineHelper called as object method - by @hi-ogawa in vitest-dev/vitest#10163 (122c2)

Alias agent reporter to minimal - by @sheremet-va in vitest-dev/vitest#10157 (663b9)

Respect diff config options in soft assertions - by @Copilot, sheremet-va and @sheremet-va in vitest-dev/vitest#8696 (9787d)

Respect diff config options in soft assertions " - by @sheremet-va in vitest-dev/vitest#8696 (7dc6d)

ast-collect: Recognize _vi_import prefix in static test discovery - by @Yejneshwar in vitest-dev/vitest#10129 (32546)

coverage: Descriptive error message when reports directory is removed during test run - by @DaveT1991 and @AriPerkkio in vitest-dev/vitest#10117 (14133)

snapshot: Increase default snapshot max output length - by @hi-ogawa and Codex in vitest-dev/vitest#10150 (21e66)

ui: Fix jsx/tsx syntax highlight - by @hi-ogawa in vitest-dev/vitest#10152 (f1b1f)

web-worker: Support MessagePort objects referenced inside postMessage data - by @whitphx and Claude Opus 4.6 (1M context) in vitest-dev/vitest#9927 and vitest-dev/vitest#10124 (7ad7d)

api: Make test-specification options writable - by @sheremet-va in vitest-dev/vitest#10154 (6abd5)

    View changes on GitHub

v4.1.4

   🚀 Experimental Features

coverage:

Default to text reporter skipFull if agent detected - by @hi-ogawa in vitest-dev/vitest#10018 (53757)

experimental:

Expose assertion as a public field - by @sheremet-va in vitest-dev/vitest#10095 (a120e)

Support aria snapshot - by @hi-ogawa, Claude Opus 4.6 (1M context), @AriPerkkio, Codex and @sheremet-va in vitest-dev/vitest#9668 (d4fbb)

... (truncated)

Commits

a09d472 chore: release v4.1.7
a8fd24c chore: release v4.1.6
18af98c fix(browser): simplify orchestrator otel carrier (#10285)
3188260 feat(browser): provide project reference in ToMatchScreenshotResolvePath (#...
e399846 chore: release v4.1.5
7dc6d54 Revert "fix: respect diff config options in soft assertions (#8696)"
9787ded fix: respect diff config options in soft assertions (#8696)
325463a fix(ast-collect): recognize _vi_import prefix in static test discovery (#10...
0e0ff41 feat(coverage): istanbul to support instrumenter option (#10119)
663b99f fix: alias agent reporter to minimal (#10157)
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for vitest since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm group with 5 updates: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.1.4` | `2.4.16` | | [globals](https://github.com/sindresorhus/globals) | `16.3.0` | `17.6.0` | | [npm-check-updates](https://github.com/raineorshine/npm-check-updates) | `18.0.2` | `22.2.1` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.2` | `6.0.3` | | [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) | `3.2.4` | `4.1.7` | Updates `@biomejs/biome` from 2.1.4 to 2.4.16 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.16/packages/@biomejs/biome) Updates `globals` from 16.3.0 to 17.6.0 - [Release notes](https://github.com/sindresorhus/globals/releases) - [Commits](sindresorhus/globals@v16.3.0...v17.6.0) Updates `npm-check-updates` from 18.0.2 to 22.2.1 - [Release notes](https://github.com/raineorshine/npm-check-updates/releases) - [Changelog](https://github.com/raineorshine/npm-check-updates/blob/main/CHANGELOG.md) - [Commits](raineorshine/npm-check-updates@v18.0.2...v22.2.1) Updates `typescript` from 5.9.2 to 6.0.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.2...v6.0.3) Updates `vitest` from 3.2.4 to 4.1.7 - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.7/packages/vitest) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.4.16 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm - dependency-name: globals dependency-version: 17.6.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: npm-check-updates dependency-version: 22.2.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: typescript dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm - dependency-name: vitest dependency-version: 4.1.7 dependency-type: direct:development update-type: version-update:semver-major dependency-group: npm ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels May 29, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps-dev): bump the npm group with 5 updates#821

chore(deps-dev): bump the npm group with 5 updates#821
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-5807be1b0d

dependabot Bot commented on behalf of github May 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github May 29, 2026

Biome CLI v2.4.16

2.4.16

Patch Changes

2.4.16

Patch Changes

v17.6.0

v17.5.0

v17.4.0

v17.3.0

v17.2.0

v17.1.0

v17.0.0

Breaking

Improvements

v22.2.1

What's Changed

v22.2.0

What's Changed

v22.1.1

What's Changed

New Contributors

v22.1.0

What's Changed

TypeScript 6.0.3

TypeScript 6.0

TypeScript 6.0 Beta

TypeScript 5.9.3

v4.1.7

🐞 Bug Fixes

View changes on GitHub

v4.1.6

🐞 Bug Fixes

🏎 Performance

View changes on GitHub

v4.1.5

🚀 Experimental Features

🐞 Bug Fixes

View changes on GitHub

v4.1.4

🚀 Experimental Features

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants