Skip to content

chore(deps)(deps): bump the minor-and-patch group in /apps/companion with 3 updates - #125

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/apps/companion/minor-and-patch-d4ff5a341c
Open

chore(deps)(deps): bump the minor-and-patch group in /apps/companion with 3 updates#125
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/bun/apps/companion/minor-and-patch-d4ff5a341c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group in /apps/companion with 3 updates: uniwind, @biomejs/biome and react-doctor.

Updates uniwind from 1.10.0 to 1.10.1

Release notes

Sourced from uniwind's releases.

Release v1.10.1

What's Changed in 1.10.1

🐛 Bug Fixes

  • fix: withUniwind remove className props on web after converting them by @​Brentlok in #615
  • fix: handle multiline classes by @​Brentlok in #610
  • fix: adopt applied html theme by @​florian-lefebvre in #599
  • fix: vite8 not prebundling react native web by @​Brentlok in #596
  • Add an internal Expo-project marker to the Uniwind Metro config and use it to lazily choose the correct transform worker. by @​sync in #593
  • fix: Remove reference to Touchable in package types by @​huntie in #592

🏠 Chores

New Contributors

Commits
  • 4614d75 chore: release v1.10.1
  • 2ea1b53 fix: withUniwind remove className props on web after converting them (#615)
  • 6cce440 fix: handle multiline classes (#610)
  • 3f971f1 ci: fix validate issue
  • 5e8e2d5 ci: fix validate issue (#603)
  • 48cb66d ci: verify if issue template has been used (#600)
  • d84b3b1 fix: initialize theme from html root when available (#599)
  • 245f9af fix: vite8 not prebundling react native web (#596)
  • 2afcc06 fix(metro): defer transform worker resolution for non-expo projects (#593)
  • f568fdd fix: Remove reference to Touchable in package types (#592)
  • Additional commits viewable in compare view

Updates @biomejs/biome from 2.5.6 to 2.5.7

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.7

2.5.7

Patch Changes

  • #10822 c171b3b Thanks @​pkallos! - Added the option ignoreIfStatements to useNullishCoalescing. Biome now flags if statements that only assign to a nullish variable (such as if (!a) { a = b }) and can rewrite them to ??=. When enabled, Biome ignores those if statements.

  • #11136 e63354c Thanks @​AkashNaickar! - Added a new nursery rule noExtendNative, which reports extending the prototype of a built-in object.

  • #10094 e007143 Thanks @​THEjacob1000! - Added the nursery rule noTailwindArbitraryValue. Biome now reports Tailwind CSS arbitrary values such as w-[400px], including in HTML/JSX class attributes, configured utility functions, and tagged templates.

  • #11184 135f476 Thanks @​subotac! - Fixed #11176: noUnknownPseudoClass now recognizes Vue's :deep() pseudo-class inside .vue style blocks.

  • #8239 a519f9d Thanks @​cormacrelf! - Fixed #8233, where Biome CLI in stdin mode didn't work correctly when handling files in projects with nested configurations. For example, with the following structure, --stdin-file-path=subdirectory/... would not use the nested configuration in subdirectory/biome.json:

    ├── biome.json
    └── subdirectory
        ├── biome.json
        └── lib.js
    
    biome format --write --stdin-file-path=subdirectory/lib.js < subdirectory/lib.js

    Now, the nested configuration is correctly picked up and applied.

    In addition, Biome now shows a warning if --stdin-file-path is provided but that path is ignored and therefore not formatted or fixed.

  • #11138 8c2c6bd Thanks @​ematipico! - Fixed noUnnecessaryConditions: Biome now chooses the same function overload as TypeScript when an argument is a callback, so conditions that were previously missed are reported.

    The following code is now invalid, because a parameter typed () => void accepts an async callback and schedule therefore returns string:

    declare function schedule(handler: () => void): string;
    declare function schedule(handler: () => Promise<void>): string | undefined;
    schedule(async () => {}) ?? "fallback";

    The following code is also now invalid, because map(() => 42) returns 42:

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.7

Patch Changes

  • #10822 c171b3b Thanks @​pkallos! - Added the option ignoreIfStatements to useNullishCoalescing. Biome now flags if statements that only assign to a nullish variable (such as if (!a) { a = b }) and can rewrite them to ??=. When enabled, Biome ignores those if statements.

  • #11136 e63354c Thanks @​AkashNaickar! - Added a new nursery rule noExtendNative, which reports extending the prototype of a built-in object.

  • #10094 e007143 Thanks @​THEjacob1000! - Added the nursery rule noTailwindArbitraryValue. Biome now reports Tailwind CSS arbitrary values such as w-[400px], including in HTML/JSX class attributes, configured utility functions, and tagged templates.

  • #11184 135f476 Thanks @​subotac! - Fixed #11176: noUnknownPseudoClass now recognizes Vue's :deep() pseudo-class inside .vue style blocks.

  • #8239 a519f9d Thanks @​cormacrelf! - Fixed #8233, where Biome CLI in stdin mode didn't work correctly when handling files in projects with nested configurations. For example, with the following structure, --stdin-file-path=subdirectory/... would not use the nested configuration in subdirectory/biome.json:

    ├── biome.json
    └── subdirectory
        ├── biome.json
        └── lib.js
    
    biome format --write --stdin-file-path=subdirectory/lib.js < subdirectory/lib.js

    Now, the nested configuration is correctly picked up and applied.

    In addition, Biome now shows a warning if --stdin-file-path is provided but that path is ignored and therefore not formatted or fixed.

  • #11138 8c2c6bd Thanks @​ematipico! - Fixed noUnnecessaryConditions: Biome now chooses the same function overload as TypeScript when an argument is a callback, so conditions that were previously missed are reported.

    The following code is now invalid, because a parameter typed () => void accepts an async callback and schedule therefore returns string:

    declare function schedule(handler: () => void): string;
    declare function schedule(handler: () => Promise<void>): string | undefined;
    schedule(async () => {}) ?? "fallback";

    The following code is also now invalid, because map(() => 42) returns 42:

    type Mapper<T> = () => T;
    declare function map<T>(mapper: Mapper<T>): T;

... (truncated)

Commits

Updates react-doctor from 0.9.3 to 0.9.5

Release notes

Sourced from react-doctor's releases.

react-doctor@0.9.5

Patch Changes

  • #1581 274bd39 Thanks @​aidenybai! - Keep transient project selection out of terminal history, and preserve final interactive results when Ctrl-C prints the cancellation footer without printing a second completed-scan footer.

  • #1572 212b8b4 Thanks @​aidenybai! - Prevent interactive-report crashes under Bun and pnpm, harden project and config discovery against cyclic or inaccessible inputs, and handle operational failures without reporting product crashes.

  • #1573 25dbf6d Thanks @​aidenybai! - Recognize callable listener disposers, exhaustive cleanup of mapped subscription collections, and guarded timers owned by effect-local helpers in effect-needs-cleanup.

  • #1577 60e4d8e Thanks @​aidenybai! - Bundle the interactive Ink renderer with its own React runtime so scans cannot load a missing or incompatible React version from the inspected project.

  • #1578 da0647e Thanks @​aidenybai! - Keep interactive scans in the Ink dashboard when using scoped scans, verbose output, diagnostic dumps, debug mode, and deprecated compatibility flags.

  • #1580 459c5d3 Thanks @​aidenybai! - Remove the legacy terminal renderer while preserving concise headless output for CI, pipes, staged hooks, score, JSON, and diagnostic dumps.

  • Updated dependencies [8b97fdc, 25dbf6d, 881ecfe, 0efadda, bafef41]:

    • oxlint-plugin-react-doctor@0.9.5
    • deslop-js@0.9.5

react-doctor@0.9.4

Patch Changes

  • #1542 c3683a2 Thanks @​aidenybai! - Make the interactive report the default in supported terminals, while preserving the existing renderer for CI, pipes, older Node versions, and machine-readable or scoped output modes. Improve the report with a stable score and action menu, responsive details, clickable links, guided GitHub Actions setup, and agent handoff. Keep navigation predictable when users go back or resize the terminal, report clipboard failures, run confirmed CI setup, keep ordinary quits quiet, and show helpful resources after cancellation.

  • #1023 45e818a Thanks @​cursor! - Honor legacy rule aliases in ignore.overrides and use current why command wording in project-selection errors.

  • #1562 cc28626 Thanks @​aidenybai! - Add an opt-in diagnostic for effects that let externally controlled selection changes move focus.

  • #1563 85e1052 Thanks @​aidenybai! - Add an opt-in diagnostic for stale-request guards backed by passively synchronized owner refs.

  • #1549 48ec9a8 Thanks @​aidenybai! - Keep large workspace scans responsive by reducing TUI redraws, cooperatively enumerating source files, excluding source explicitly marked generated or vendored by repository attributes, precomputing workspace project file counts in one pass, reusing source listings for configured ignores, reusing repository cache fingerprints across workspace projects, running root-owned dead-code analysis once instead of again for every child project, sizing that shared pass from the full workspace tree, balancing lint batches, detecting cross-file renderer capabilities once before workers start, skipping unnecessary whole-project source indexes, capping automatic lint parallelism before its contention cliff, removing redundant binding-marker work from semantic analysis, and lowering lint subprocess priority so foreground applications remain responsive. Remove implicit lint and whole-scan deadlines while enforcing explicitly configured deadlines on active subprocesses, preserve partial security findings without marking disabled passes incomplete, list queued projects skipped at the deadline, show every incomplete-result warning, retry scores after a contended workspace pool settles, terminate every subprocess and clear the active TUI on cancellation or quit, suppress bundled Browserslist maintenance warnings, memoize module-resolution filesystem probes, path-compress config lookup walks, bound recursive helper analysis, index repeated class-member lookups, and visit each alias binding once. Project selection now uses a disposable terminal screen while bounded scan progress and the final report stay inline, workspace indexing is labeled immediately, scan progress uses a smoother spinner, long score fallbacks wrap within the terminal, incomplete analysis is no longer mislabeled as a score API outage, --no-cache disables every cache layer for the run, precomputed project counts remain accurate across discovery-cache hits, fixed command literals no longer trigger imported-metadata security findings, and extensionless module paths passed to dynamic loaders no longer produce unused-file findings.

  • #1559 afd60db Thanks @​skoshx! - Recognize callable listener disposers, exhaustive cleanup of mapped subscription collections, and guarded timers owned by effect-local helpers in effect-needs-cleanup.

  • #1566 ba04952 Thanks @​aidenybai! - Keep terminal history visible while selecting workspace projects in the interactive CLI.

  • #948 c825c59 Thanks @​cursor! - Avoid showing the AI-training license notice for broad development, credential, hardware, and service configuration variables that do not prove a training job is active.

  • Updated dependencies [f7dbdfa, 44922d6, cc28626, b02bc69, 85e1052, 4c61080, 02e3188, 48ec9a8, afd60db, 3466fe1, 4e4740d, a34d6a1, 91ebe85, 3a93a34, 8a22de1, 19f2148, 7f29eca, 37427c9]:

    • oxlint-plugin-react-doctor@0.9.4
    • deslop-js@0.9.4
Changelog

Sourced from react-doctor's changelog.

0.9.5

Patch Changes

  • #1581 274bd39 Thanks @​aidenybai! - Keep transient project selection out of terminal history, and preserve final interactive results when Ctrl-C prints the cancellation footer without printing a second completed-scan footer.

  • #1572 212b8b4 Thanks @​aidenybai! - Prevent interactive-report crashes under Bun and pnpm, harden project and config discovery against cyclic or inaccessible inputs, and handle operational failures without reporting product crashes.

  • #1573 25dbf6d Thanks @​aidenybai! - Recognize callable listener disposers, exhaustive cleanup of mapped subscription collections, and guarded timers owned by effect-local helpers in effect-needs-cleanup.

  • #1577 60e4d8e Thanks @​aidenybai! - Bundle the interactive Ink renderer with its own React runtime so scans cannot load a missing or incompatible React version from the inspected project.

  • #1578 da0647e Thanks @​aidenybai! - Keep interactive scans in the Ink dashboard when using scoped scans, verbose output, diagnostic dumps, debug mode, and deprecated compatibility flags.

  • #1580 459c5d3 Thanks @​aidenybai! - Remove the legacy terminal renderer while preserving concise headless output for CI, pipes, staged hooks, score, JSON, and diagnostic dumps.

  • Updated dependencies [8b97fdc, 25dbf6d, 881ecfe, 0efadda, bafef41]:

    • oxlint-plugin-react-doctor@0.9.5
    • deslop-js@0.9.5

0.9.4

Patch Changes

  • #1542 c3683a2 Thanks @​aidenybai! - Make the interactive report the default in supported terminals, while preserving the existing renderer for CI, pipes, older Node versions, and machine-readable or scoped output modes. Improve the report with a stable score and action menu, responsive details, clickable links, guided GitHub Actions setup, and agent handoff. Keep navigation predictable when users go back or resize the terminal, report clipboard failures, run confirmed CI setup, keep ordinary quits quiet, and show helpful resources after cancellation.

  • #1023 45e818a Thanks @​cursor! - Honor legacy rule aliases in ignore.overrides and use current why command wording in project-selection errors.

  • #1562 cc28626 Thanks @​aidenybai! - Add an opt-in diagnostic for effects that let externally controlled selection changes move focus.

  • #1563 85e1052 Thanks @​aidenybai! - Add an opt-in diagnostic for stale-request guards backed by passively synchronized owner refs.

  • #1549 48ec9a8 Thanks @​aidenybai! - Keep large workspace scans responsive by reducing TUI redraws, cooperatively enumerating source files, excluding source explicitly marked generated or vendored by repository attributes, precomputing workspace project file counts in one pass, reusing source listings for configured ignores, reusing repository cache fingerprints across workspace projects, running root-owned dead-code analysis once instead of again for every child project, sizing that shared pass from the full workspace tree, balancing lint batches, detecting cross-file renderer capabilities once before workers start, skipping unnecessary whole-project source indexes, capping automatic lint parallelism before its contention cliff, removing redundant binding-marker work from semantic analysis, and lowering lint subprocess priority so foreground applications remain responsive. Remove implicit lint and whole-scan deadlines while enforcing explicitly configured deadlines on active subprocesses, preserve partial security findings without marking disabled passes incomplete, list queued projects skipped at the deadline, show every incomplete-result warning, retry scores after a contended workspace pool settles, terminate every subprocess and clear the active TUI on cancellation or quit, suppress bundled Browserslist maintenance warnings, memoize module-resolution filesystem probes, path-compress config lookup walks, bound recursive helper analysis, index repeated class-member lookups, and visit each alias binding once. Project selection now uses a disposable terminal screen while bounded scan progress and the final report stay inline, workspace indexing is labeled immediately, scan progress uses a smoother spinner, long score fallbacks wrap within the terminal, incomplete analysis is no longer mislabeled as a score API outage, --no-cache disables every cache layer for the run, precomputed project counts remain accurate across discovery-cache hits, fixed command literals no longer trigger imported-metadata security findings, and extensionless module paths passed to dynamic loaders no longer produce unused-file findings.

  • #1559 afd60db Thanks @​skoshx! - Recognize callable listener disposers, exhaustive cleanup of mapped subscription collections, and guarded timers owned by effect-local helpers in effect-needs-cleanup.

  • #1566 ba04952 Thanks @​aidenybai! - Keep terminal history visible while selecting workspace projects in the interactive CLI.

  • #948 c825c59 Thanks @​cursor! - Avoid showing the AI-training license notice for broad development, credential, hardware, and service configuration variables that do not prove a training job is active.

  • Updated dependencies [f7dbdfa, 44922d6, cc28626, b02bc69, 85e1052, 4c61080, 02e3188, 48ec9a8, afd60db, 3466fe1, 4e4740d, a34d6a1, 91ebe85, 3a93a34, 8a22de1, 19f2148, 7f29eca, 37427c9]:

    • oxlint-plugin-react-doctor@0.9.4
    • deslop-js@0.9.4
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group in /apps/companion with 3 updates: [uniwind](https://github.com/uni-stack/uniwind), [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) and [react-doctor](https://github.com/millionco/react-doctor/tree/HEAD/packages/react-doctor).


Updates `uniwind` from 1.10.0 to 1.10.1
- [Release notes](https://github.com/uni-stack/uniwind/releases)
- [Commits](uni-stack/uniwind@v1.10.0...v1.10.1)

Updates `@biomejs/biome` from 2.5.6 to 2.5.7
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.7/packages/@biomejs/biome)

Updates `react-doctor` from 0.9.3 to 0.9.5
- [Release notes](https://github.com/millionco/react-doctor/releases)
- [Changelog](https://github.com/millionco/react-doctor/blob/main/packages/react-doctor/CHANGELOG.md)
- [Commits](https://github.com/millionco/react-doctor/commits/react-doctor@0.9.5/packages/react-doctor)

---
updated-dependencies:
- dependency-name: uniwind
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: react-doctor
  dependency-version: 0.9.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 10, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 10, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: companion. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants