Skip to content

build(deps-dev): bump the dev-dependencies group across 1 directory with 6 updates - #75

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-87a68d9e36
Closed

build(deps-dev): bump the dev-dependencies group across 1 directory with 6 updates#75
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-87a68d9e36

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 6 updates in the / directory:

Package From To
@biomejs/biome 2.5.3 2.5.10
tsx 4.23.0 4.23.12
@types/vscode 1.125.0 1.134.0
esbuild 0.28.1 0.28.2
vscode-languageserver-protocol 3.17.5 3.18.2
vue-tsc 3.3.9 3.3.11

Updates @biomejs/biome from 2.5.3 to 2.5.10

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.10

2.5.10

Patch Changes

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed Astro rejecting JavaScript comments between attributes.

    <div /* block comment */ class="something"></div>
<Component /* c */ client:load />

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed a bare < in Astro text being treated as the start of a tag, such as <p>5 < 6 and 7 > 6</p>. As in HTML, a < that cannot open a tag is text and needs no escaping.

  • #11438 3133ffa Thanks @​Princesseuh! - Fixed #8294: an Astro expression holding only a comment is no longer reported as a parse error, which also stopped the whole file from being formatted.

    <div>{/* a note */}</div>
<div class={/* a note */}>x</div>

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed #9165: an empty Astro expression such as <div>{}</div> no longer fails to parse. Astro renders {} as nothing.

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed Astro expressions containing a comment failing to parse.

    <div>{/* block comment */ x}</div>
<div>{/* only a comment */}</div>

  • #11403 8f7786f Thanks @​Princesseuh! - Added support for Astro's fragment shorthand.

    <>
  <p>a</p>
</>

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed an Astro frontmatter block being cut short by a closing tag inside a string or comment.

    ---
const a = "</script>";
// </script> in a comment
---

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed --- being read as an Astro frontmatter fence when markup precedes it. Astro only recognizes frontmatter at the very start of a file, so a file opening with a comment now has no frontmatter, and its --- lines are content.

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.10

Patch Changes

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed Astro rejecting JavaScript comments between attributes.

    <div /* block comment */ class="something"></div>
<Component /* c */ client:load />

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed a bare < in Astro text being treated as the start of a tag, such as <p>5 < 6 and 7 > 6</p>. As in HTML, a < that cannot open a tag is text and needs no escaping.

  • #11438 3133ffa Thanks @​Princesseuh! - Fixed #8294: an Astro expression holding only a comment is no longer reported as a parse error, which also stopped the whole file from being formatted.

    <div>{/* a note */}</div>
<div class={/* a note */}>x</div>

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed #9165: an empty Astro expression such as <div>{}</div> no longer fails to parse. Astro renders {} as nothing.

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed Astro expressions containing a comment failing to parse.

    <div>{/* block comment */ x}</div>
<div>{/* only a comment */}</div>

  • #11403 8f7786f Thanks @​Princesseuh! - Added support for Astro's fragment shorthand.

    <>
  <p>a</p>
</>

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed an Astro frontmatter block being cut short by a closing tag inside a string or comment.

    ---
const a = "</script>";
// </script> in a comment
---

  • #11403 8f7786f Thanks @​Princesseuh! - Fixed --- being read as an Astro frontmatter fence when markup precedes it. Astro only recognizes frontmatter at the very start of a file, so a file opening with a comment now has no frontmatter, and its --- lines are content.

    <!-- c -->

... (truncated)

Commits

Updates tsx from 4.23.0 to 4.23.12

Release notes

Sourced from tsx's releases.

v4.23.12

4.23.12 (2026-08-10)

Bug Fixes

  • shim import.meta when tokens are split by comments or newlines (#829) (ed9d330), closes #828

This release is also available on:

v4.23.11

4.23.11 (2026-08-07)

Bug Fixes

  • preserve async ESM require fallback (55cbece)

This release is also available on:

v4.23.10

4.23.10 (2026-08-07)

Bug Fixes

This release is also available on:

v4.23.9

4.23.9 (2026-08-06)

Bug Fixes

  • map Node test locations (2f55884)
  • support data URLs in tsImport (b94f46f)

This release is also available on:

v4.23.8

... (truncated)

Commits
  • ed9d330 fix: shim import.meta when tokens are split by comments or newlines (#829)
  • 651f5be test: cover CommonJS TypeScript import.meta paths
  • bd3bc64 test: cover CommonJS loader source fallback
  • 55cbece fix: preserve async ESM require fallback
  • 6c5ba85 docs: document CommonJS default interop
  • ec1bcd5 fix: support nyc coverage discovery (#710)
  • b6e5b48 docs: clarify CommonJS default imports
  • 2f55884 fix: map Node test locations
  • de935d5 docs: document Node source-map stack formatting
  • b94f46f fix: support data URLs in tsImport
  • Additional commits viewable in compare view

Updates @types/vscode from 1.125.0 to 1.134.0

Commits

Updates esbuild from 0.28.1 to 0.28.2

Release notes

Sourced from esbuild's releases.

v0.28.2

  • Fix tree shaking bug due to TypeScript import alias (#4507)

    This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

    import Base from './dep.js';
import Alias = Base.SomeType;

  • Fix CSS minification bug involving & (#4497)

    This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

    /* Original code */
.a .b {
  & .b:not(& .c) {
    color: red;
  }
}
/* Old output (with --minify) */
.a .b{.b:not(& .c){color:red}}
/* New output (with --minify) */
.a .b{& .b:not(& .c){color:red}}

    This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

  • Avoid overwriting input files without --allow-overwrite (#4484)

    For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

    This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

  • Fix incorrect code generated when using top-level await (#4498)

    Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

  • Fix a minification bug with lowered logical assignment operators (#4508)

    This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

    // Original code
function foo() {
  let x
  bar(x ||= {})

... (truncated)

Changelog

Sourced from esbuild's changelog.

0.28.2

  • Fix tree shaking bug due to TypeScript import alias (#4507)

    This release fixes a bug that could cause esbuild to incorrectly tree-shake imports that are used in a TypeScript type alias under certain circumstances. Affected code uses a TypeScript-specific import assignment and looks something like this:

    import Base from './dep.js';
import Alias = Base.SomeType;

  • Fix CSS minification bug involving & (#4497)

    This release fixes a bug where esbuild's CSS minifier incorrectly removed a & when it was unsafe to do so. Here is an example:

    /* Original code */
.a .b {
  & .b:not(& .c) {
    color: red;
  }
}
/* Old output (with --minify) */
.a .b{.b:not(& .c){color:red}}
/* New output (with --minify) */
.a .b{& .b:not(& .c){color:red}}

    This should match <span class="a"><span class="b"><span class="b">yes</span></span></span> but not <span class="a"><span class="b">no</span></span>. The old output incorrectly matched both.

  • Avoid overwriting input files without --allow-overwrite (#4484)

    For example: esbuild input.js --outfile=input.js tells esbuild to overwrite input.js with the output of running esbuild on it. This was supposed to already be prevented by default, but it accidentally regressed in version 0.17.0 and apparently didn't have any test coverage. The error message was being printed but the input file was still being overwritten. Oops.

    This release puts the original behavior back. With this release, esbuild should now actually avoid overwriting input files unless --allow-overwrite is explicitly present. This is done by not writing out any files when a build error is encountered.

  • Fix incorrect code generated when using top-level await (#4498)

    Previously esbuild could generate code containing a syntax error in complex scenarios involving top-level await used in a dependency cycle. The problem was a missing async on one or more module wrapper closures. With this release, esbuild now uses a fixed-point iteration algorithm to correctly annotate all dependencies in the cycle as needing an async module wrapper.

  • Fix a minification bug with lowered logical assignment operators (#4508)

    This release fixes a bug that could cause esbuild to generate incorrect code for logical assignment operators when lowering them to an older target environment. Specifically the lowering process requires duplicating the left-hand side, but esbuild incorrectly failed to count the duplicate as a new usage when the left-hand side is an identifier. That then caused the minifier to believe that the left-hand side was only used once and could attempt to incorrectly inline an initializer into the first usage. This bug has now been fixed:

    // Original code
function foo() {
  let x

... (truncated)

Commits
  • 609683d publish 0.28.2 to npm
  • 11b1fe4 add to release notes
  • ab50d91 css: fix green/blue channel swap in oklch gamut mapping (#4488)
  • 04627b6 fix #4498: async TLA checks need a worklist
  • 5c15177 disable gopls in the go folder
  • fc2ee9b css: adjust parser to allow --foo: {...}
  • 209db54 release notes for css nesting bugfix
  • c625d31 fix #4497: preserve nested ampersands during minification (#4500)
  • 34474e2 better isolation of current part in js parser
  • 07f6e8c fix #4507: import assignment tree-shaking bug
  • Additional commits viewable in compare view

Updates vscode-languageserver-protocol from 3.17.5 to 3.18.2

Release notes

Sourced from vscode-languageserver-protocol's releases.

release/protocol/3.18.2

No release notes provided.

release/protocol/3.18.1

Changes:

  • #1796: Make TextDocumentContentFeature a supported capability
  • #1795: textDocumentContent capability/feature is still behind a proposed gate even though in 3.18 it's not flagged as proposed anymore
  • #1794: Fix partial result type for textDocument/diagnostic request
  • #1792: Update @​vscode/test-electron to version 3.0.0
  • #1791: Refine notification assertions in delayOpenNotifications tests
  • #1790: Update inline value documentation and clean up dependencies
  • #1788: Update dependency versions in lock files
  • #1787: Merge 3.18 release into main
  • #1786: Shorten test dir path

This list of changes was auto generated.

release/protocol/3.18.0

No release notes provided.

release/types/3.18.0

Changes:

Feature Requests:

  • #1691: Use NoInfer for better typing
  • #1692: setImmediate Implementation in browser RAL for json-rpc is not ideal.
  • #1698: RenameParams does not reference TextDocumentPositionParams interface in the JSON metamodel

Bugs:

  • #752: Edits are applied twice
  • #1717: Client requests textDocument/diagnostics before textDocument/didOpen
  • #1693: Output channel leak when stopping LanguageClient
  • #1581: Client error 'Failed to determine file type' after undoing rename with Cmd+Z
  • #1548: Extra true in the output log when a language server disconnects

Others:

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by microsoft1es, a new releaser for vscode-languageserver-protocol since your current version.


Updates vue-tsc from 3.3.9 to 3.3.11

Release notes

Sourced from vue-tsc's releases.

v3.3.11

language-core

  • fix: generate full fragment props for type checking (#6155) - Thanks to @​serkodev!

language-service

  • fix: invalidate tag and prop casing detection after template changes (#6172) - Thanks to @​serkodev!
  • refactor: make name casing detection reactive (#6173) - Thanks to @​KazariEX!

component-meta

  • fix: invalidate module resolution caches when deleting files (#6163) - Thanks to @​serkodev!

tsc

  • fix: make extension retry errors serializable across IPC (#6162) - Thanks to @​KazariEX!

vscode

Our Sponsors ❤️

... (truncated)

Changelog

Sourced from vue-tsc's changelog.

3.3.11 (2026-08-21)

language-core

  • fix: generate full fragment props for type checking (#6155) - Thanks to @​serkodev!

language-service

  • fix: invalidate tag and prop casing detection after template changes (#6172) - Thanks to @​serkodev!
  • refactor: make name casing detection reactive (#6173) - Thanks to @​KazariEX!

component-meta

  • fix: invalidate module resolution caches when deleting files (#6163) - Thanks to @​serkodev!

tsc

  • fix: make extension retry errors serializable across IPC (#6162) - Thanks to @​KazariEX!

vscode

3.3.10 (2026-08-15)

language-core

  • fix: ignore trailing whitespace after generic parameter commas - Thanks to @​KazariEX!
  • fix: resolve v-for item type over generic sources (#6141) - Thanks to @​serkodev!
  • fix: do not extract SFC blocks across inline Markdown code (#6145) - Thanks to @​lazerg!

language-service

  • fix: serialize template data provider access across concurrent requests (#6154) - Thanks to @​serkodev!

tsc

  • fix: support different extension sets across project references (#6146) - Thanks to @​lazerg!

typescript-plugin

vscode

  • feat: patch typescript.js via --require to support read-only file systems (#6149) - Thanks to @​serkodev!
  • fix: isolate custom TypeScript plugin paths between profiles (#6148) - Thanks to @​serkodev!
Commits

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 24, 2026
@dependabot
dependabot Bot requested a review from ChanMeng666 as a code owner August 24, 2026 00:37
@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Aug 24, 2026
@github-actions

github-actions Bot commented Aug 24, 2026 •
edited
Loading

Copy link
Copy Markdown

⏱️ Benchmark (median ms, informational — not a gate)

Plan Stage Current Baseline Δ
BALANCED compile 178.18 27.69 +543% ⚠️
BALANCED parse 8.36 6.52 +28% ⚠️
BALANCED resolve 22.78 6.20 +267% ⚠️
BALANCED toScene 139.21 8.02 +1635% ⚠️
BALANCED renderSvg 2.87 2.99 -4%
BALANCED lint 55.21 7.20 +667% ⚠️
BALANCED describe 17.64 5.73 +208% ⚠️
BALANCED circulation 0.00 — —
BALANCED occupancy 0.93 — —
ROOM_HEAVY compile 217.10 17.15 +1166% ⚠️
ROOM_HEAVY parse 8.80 7.67 +15%
ROOM_HEAVY resolve 1.97 4.46 -56%
ROOM_HEAVY toScene 201.18 0.70 +28681% ⚠️
ROOM_HEAVY renderSvg 2.15 2.78 -23%
ROOM_HEAVY lint 147.31 2.39 +6056% ⚠️
ROOM_HEAVY describe 65.22 28.73 +127% ⚠️
ROOM_HEAVY circulation 0.00 — —
ROOM_HEAVY occupancy 0.09 — —
OPENING_HEAVY compile 65.93 51.90 +27% ⚠️
OPENING_HEAVY parse 8.40 6.60 +27% ⚠️
OPENING_HEAVY resolve 46.73 10.19 +359% ⚠️
OPENING_HEAVY toScene 7.04 22.04 -68%
OPENING_HEAVY renderSvg 2.33 2.86 -19%
OPENING_HEAVY lint 4.30 3.98 +8%
OPENING_HEAVY describe 0.95 0.67 +43% ⚠️
OPENING_HEAVY circulation 0.00 — —
OPENING_HEAVY occupancy 0.04 — —
STUDIO compile 2.73 — —
STUDIO parse 0.34 — —
STUDIO resolve 0.29 — —
STUDIO toScene 0.97 — —
STUDIO renderSvg 0.28 — —
STUDIO lint 3.92 — —
STUDIO describe 2.03 — —
STUDIO circulation 1.81 — —
STUDIO occupancy 0.12 — —
MUSEUM compile 6.57 — —
MUSEUM parse 0.77 — —
MUSEUM resolve 0.93 — —
MUSEUM toScene 1.96 — —
MUSEUM renderSvg 0.74 — —
MUSEUM lint 61.01 — —
MUSEUM describe 46.08 — —
MUSEUM circulation 44.94 — —
MUSEUM occupancy 11.80 — —

⚠️ One or more stages regressed past the warning threshold. Timings are runner-dependent — confirm locally before acting.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dev-dependencies-87a68d9e36 branch from dfbec8a to c432ab7 Compare August 25, 2026 12:00
@dependabot dependabot Bot changed the title build(deps-dev): Bump the dev-dependencies group across 1 directory with 6 updates build(deps-dev): bump the dev-dependencies group across 1 directory with 6 updates Aug 26, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dev-dependencies-87a68d9e36 branch 2 times, most recently from 7f8fad9 to acbb837 Compare August 26, 2026 09:17
@dependabot
build(deps-dev): bump the dev-dependencies group across 1 directory w…
eaf73f4 
…ith 6 updates

Bumps the dev-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.3` | `2.5.10` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.0` | `4.23.12` |
| [@types/vscode](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/vscode) | `1.125.0` | `1.134.0` |
| [esbuild](https://github.com/evanw/esbuild) | `0.28.1` | `0.28.2` |
| [vscode-languageserver-protocol](https://github.com/Microsoft/vscode-languageserver-node/tree/HEAD/protocol) | `3.17.5` | `3.18.2` |
| [vue-tsc](https://github.com/vuejs/language-tools/tree/HEAD/packages/tsc) | `3.3.9` | `3.3.11` |



Updates `@biomejs/biome` from 2.5.3 to 2.5.10
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.10/packages/@biomejs/biome)

Updates `tsx` from 4.23.0 to 4.23.12
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.0...v4.23.12)

Updates `@types/vscode` from 1.125.0 to 1.134.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/vscode)

Updates `esbuild` from 0.28.1 to 0.28.2
- [Release notes](https://github.com/evanw/esbuild/releases)
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)
- [Commits](evanw/esbuild@v0.28.1...v0.28.2)

Updates `vscode-languageserver-protocol` from 3.17.5 to 3.18.2
- [Release notes](https://github.com/Microsoft/vscode-languageserver-node/releases)
- [Commits](https://github.com/Microsoft/vscode-languageserver-node/commits/release/protocol/3.18.2/protocol)

Updates `vue-tsc` from 3.3.9 to 3.3.11
- [Release notes](https://github.com/vuejs/language-tools/releases)
- [Changelog](https://github.com/vuejs/language-tools/blob/master/CHANGELOG.md)
- [Commits](https://github.com/vuejs/language-tools/commits/v3.3.11/packages/tsc)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.9
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@types/vscode"
  dependency-version: 1.134.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: esbuild
  dependency-version: 0.28.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: tsx
  dependency-version: 4.23.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: vscode-languageserver-protocol
  dependency-version: 3.18.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: vue-tsc
  dependency-version: 3.3.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dev-dependencies-87a68d9e36 branch from acbb837 to eaf73f4 Compare August 26, 2026 11:51
@dependabot @github

dependabot Bot commented on behalf of github Aug 28, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 28, 2026
@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/dev-dependencies-87a68d9e36 branch August 28, 2026 08:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ChanMeng666 ChanMeng666 Awaiting requested review from ChanMeng666 ChanMeng666 is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants