Skip to content

Dependencies: Update all non-major dependencies - #2106

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-non-major-dependencies
Open

Dependencies: Update all non-major dependencies#2106
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-non-major-dependencies

Conversation

@renovate

@renovate renovate Bot commented Aug 25, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
@biomejs/biome (source) 2.5.8 → 2.5.9 age confidence devDependencies patch 2.5.10
@hookform/resolvers (source) ^5.9.0 → ^5.9.1 age confidence dependencies patch
@tiptap/core (source) ^3.30.1 → ^3.30.2 age confidence dependencies patch 3.30.3
@tiptap/extension-code-block (source) ^3.30.1 → ^3.30.2 age confidence dependencies patch 3.30.3
@tiptap/extension-code-block-lowlight (source) ^3.30.1 → ^3.30.2 age confidence dependencies patch 3.30.3
@tiptap/extension-color (source) ^3.30.1 → ^3.30.2 age confidence dependencies patch 3.30.3
@tiptap/extension-heading (source) ^3.30.1 → ^3.30.2 age confidence dependencies patch 3.30.3
@tiptap/extension-horizontal-rule (source) ^3.30.1 → ^3.30.2 age confidence dependencies patch 3.30.3
@tiptap/extension-image (source) ^3.30.1 → ^3.30.2 age confidence dependencies patch 3.30.3
@tiptap/extension-link (source) ^3.30.1 → ^3.30.2 age confidence dependencies patch 3.30.3
@tiptap/extension-placeholder (source) ^3.30.1 → ^3.30.2 age confidence dependencies patch 3.30.3
@tiptap/extension-text-style (source) ^3.30.1 → ^3.30.2 age confidence dependencies patch 3.30.3
@tiptap/extension-typography (source) ^3.30.1 → ^3.30.2 age confidence dependencies patch 3.30.3
@tiptap/extension-underline (source) ^3.30.1 → ^3.30.2 age confidence dependencies patch 3.30.3
@tiptap/extensions (source) ^3.30.1 → ^3.30.2 age confidence dependencies patch 3.30.3
@tiptap/pm (source) ^3.30.1 → ^3.30.2 age confidence dependencies patch 3.30.3
@tiptap/react (source) ^3.30.1 → ^3.30.2 age confidence dependencies patch 3.30.3
@tiptap/starter-kit (source) ^3.30.1 → ^3.30.2 age confidence dependencies patch 3.30.3
chrislusf/seaweedfs 4.41 → 4.42 age confidence minor 4.44 (+1)
dayjs (source) ^1.11.22 → ^1.11.23 age confidence dependencies patch
github.com/stretchr/testify v1.11.1 → v1.12.0 age confidence require minor v1.12.1
lucide-react (source) ^1.31.0 → ^1.32.0 age confidence dependencies minor 1.34.0 (+1)
uuid ^14.0.1 → ^14.0.2 age confidence resolutions patch

Release Notes

biomejs/biome (@​biomejs/biome)

v2.5.9

Compare Source

Patch Changes

  • #​11321 41386f3 Thanks @​dyc3! - Fixed #​11315: The CSS parser now recovers at declaration boundaries after bogus declarations, allowing subsequent valid declarations to be parsed.

  • #​11248 57b197e Thanks @​yanthomasdev! - Expanded the environment variable metadata used by biome rage to include BIOME_BINARY, BIOME_LOG_FILE, and RUST_BACKTRACE as well as reworded explanations for better readability.

  • #​11377 a8798ea Thanks @​Netail! - Added a new nursery rule useNamedLayer which disallows anonymous cascade layers.

    @layer {
  a {
    color: red;
  }
}

  • #​11327 6771cf5 Thanks @​dyc3! - The HTML formatter now preserves meaningful blank lines in HTML, including spacing after elements with trailing spaces and blank lines between comment groups.

     <div>
   <!-- first group -->
+
   <!-- second group -->
 </div>

  • #​10312 ba8aa18 Thanks @​dyc3! - Added the nursery rule useTailwindShorthandClasses, which suggests shorter Tailwind utility classes. For example, the rule suggests replacing w-4 h-4 with size-4.

  • #​11333 715e0cd Thanks @​kkkhs! - Fixed #​11328: lint/nursery/useExpect now recognizes Vitest Browser Mode expect.element() calls as assertions.

  • #​11343 9b98211 Thanks @​johncarmack1984! - Fixed #​11311: the CSS parser now accepts Tailwind container-query variant names in @variant, such as @xl and @max-xl. These previously produced a parse error and a noUnknownAtRules diagnostic.

    @variant @xl {
  div {
    background: red;
  }
}

  • #​11220 3e8c488 Thanks @​santichausis! - Fixed #​9541: noUndeclaredVariables, noUnusedImports, and noUnusedVariables now correctly recognise exported variables and functions declared in one embedded <script> block as usable from a sibling <script> block, in Svelte's <script module>/<script> pair and Vue's non-setup <script> blocks.

    For example, Biome no longer reports greet as undeclared in the following Svelte component:

    <script module>
  export function greet() {
    console.log("Hello!");
  }
</script>

<script>
  greet();
</script>

  • #​11300 36430eb Thanks @​dyc3! - Fixed the HTML formatter's whitespace handling for marquee, noscript, video, audio, and object elements.

    - <marquee behavior="alternate"> This text will bounce </marquee>
+ <marquee behavior="alternate">This text will bounce</marquee>

  • #​11299 6559e6c Thanks @​jp-knj! - Added the nursery rule useAstroClientOnlyDirectiveValue, which reports Astro client:only directives without an initializer.

    For example, <Component client:only /> triggers the rule.

  • #​11365 7529811 Thanks @​MHJahanbakhsh! - Fixed #​11229: The useGenericFontNames rule now treats math as a valid generic font family.

  • #​11346 674f5f4 Thanks @​Jayllyz! - Fixed #​11335: noComponentHookFactories now reports a use-prefixed variable only when a function is assigned to it directly.

    function factory() {
  const useColors = true; // no longer reported
  const useStore = createStore({ count: 0 }); // no longer reported
  const useData = () => useState(null); // still reported
  return useColors;
}

  • #​11334 c87c46a Thanks @​zkasuran! - Fixed #​11317: noSvgWithoutTitle no longer reports an svg that uses the boolean shorthand aria-hidden (equivalent to aria-hidden={true} in React).

  • #​11364 13853b1 Thanks @​ematipico! - Fixed a bug where useJsxKeyInIterable incorrectly flagged Astro files.

  • #​11321 41386f3 Thanks @​dyc3! - Fixed #​11315: Invalid CSS declarations in HTML style attributes now produce parser diagnostics instead of causing a panic.

  • #​11325 67c3bf0 Thanks @​dyc3! - Fixed HTML text wrapping to account for the width of an adjacent closing tag, avoiding lines that exceed the configured width when the final word and tag must move together.

     <a-long-long-long-element
-  >foo bar foo bar foo bar foo bar foo bar foo bar foo bar</a-long-long-long-element
+  >foo bar foo bar foo bar foo bar foo bar foo
+  bar</a-long-long-long-element
 >

  • #​11367 fe5b5d4 Thanks @​ematipico! - Fixed TypeScript compilerOptions.paths resolution when mapping targets omit ./. Biome now resolves these targets relative to their configured path base.

  • #​11316 17e48d6 Thanks @​wanxiankai! - Fixed #​11289: the safe fix for noExtraBooleanCast now preserves parentheses around nested conditional expressions.

  • #​11254 d25d113 Thanks @​dyc3! - Fixed #​11242: Biome no longer crashes with an access violation when analysing files on Windows ARM64.

  • #​11221 85aac73 Thanks @​freeatnet! - Added the nursery rule noUnsafeTypeAssertion, which disallows TypeScript type assertions while allowing const assertions.

    const value = input as SomeType;

  • #​11314 7ffb677 Thanks @​ematipico! - Fixed #​11310: Restored the performance of noMisusedPromises and noFloatingPromises when analyzed expressions share deep imported type paths.

  • #​11356 6cd3263 Thanks @​johncarmack1984! - The Tailwind parser now understands modifiers on bare utilities (@container/sidebar, shadow/50).

  • #​11318 76059e9 Thanks @​johncarmack1984! - The Tailwind parser now understands container-query variants (@sm:, @max-lg:, @min-[400px]:) and child and descendant variants (*:, **:).

  • #​11357 faa2074 Thanks @​johncarmack1984! - The Tailwind parser now accepts the legacy leading ! important marker (!flex, hover:!p-4).

  • #​11344 f34e15c Thanks @​johncarmack1984! - The Tailwind parser now understands combinator selectors in arbitrary variants (has-[>svg]:, has-[+p]:), modifiers on variants (group-hover/menu:, @sm/main:), and arbitrary container-query sizes (@[400px]:).

  • #​11324 2f5d452 Thanks @​dyc3! - Fixed HTML formatting that inserted rendered whitespace between an element and touching text when the line wrapped.

      <div>
-   before<meter value=".5"></meter>
-   after
+   before<meter value=".5"></meter
+   >after
  </div>

  • #​11312 e65f07e Thanks @​xosnos! - Added a new nursery rule useControlLabel for both HTML and JSX, which reports interactive control elements (button, menuitem) without an accessible label.

    <button />

  • #​11364 13853b1 Thanks @​ematipico! - Fixed SVG parsing for files with an XML declaration followed by a PUBLIC doctype, such as <?xml version="1.0"?><!DOCTYPE svg PUBLIC "a" "b">.

  • #​11301 610ee28 Thanks @​dyc3! - Fixed parent tag wrapping when an HTML element starts or ends with a block-like or hidden child such as source, track, or param.

    - <video src="brave.webm"><track kind="subtitles" src="brave.en.vtt"></video>
+ <video src="brave.webm">
+   <track kind="subtitles" src="brave.en.vtt">
+ </video>
seaweedfs/seaweedfs (chrislusf/seaweedfs)

v4.42

Compare Source

What's Changed

Master and topology

Heartbeat protocol, volume registration, and a long series of allocation/copy removals on the master's hot paths.

  • topology: digest the volumes a master believes each node holds (#​10619)
  • heartbeat: carry a volume digest and verify it (#​10627)
  • heartbeat: send only the volumes that changed (#​10640)
  • heartbeat: keep the master current through collection churn (#​10657)
  • topology: follow a volume that moved between a server's disks (#​10628)
  • master: keep disk_id when registering volumes from incremental heartbeats (#​10686)
  • topology: provisional volume update must not erase the reported disk id (#​10687)
  • topology: keep per-node volume state with the location it describes (#​10654)
  • topology: mark a volume crowded only if it can take writes (#​10655)
  • topology: track volume size only where writes can land (#​10653)
  • topology: clamp the deleted-vs-total subtractions in volume stats (#​10633)
  • master: keep a racing registration out of a dying collection (#​10677)
  • master: align default volume size with EC rows (#​10761)
  • master: let VolumeList ask for the volumes it wants (#​10674)
  • master: stream volume listings (#​10676)
  • master: stop copying the cluster to name it (#​10700)
  • topology: keep the volume map's values out of its slots (#​10680)
  • topology: build the volume list without copying the volume map first (#​10668)
  • topology: diff a heartbeat without copying the volume map (#​10608)
  • topology: preallocate the heartbeat volume conversion slice (#​10607)
  • topology: preallocate the disk volume snapshot (#​10609)
  • topology: size the new-volume list from the actual delta (#​10613)
  • topology: preallocate the per-disk VolumeList payload (#​10614)
  • topology: preallocate the client-facing topology snapshots (#​10615)
  • topology: gather a node's volumes into one slice (#​10617)
  • topology: log writable-state changes, not every check (#​10612)
  • topology: drop the unused DataNode volume id listing (#​10618)

Volume server and storage

  • storage: fix corrupted leveldb detection in DoOffsetLoading (#​10650)
  • storage: count a volume's needles in uint32 (#​10718)
  • storage: share the volume strings a cluster repeats (#​10665)
  • storage: stop keeping the remote storage key on the master (#​10672)
  • storage: order VolumeInfo by alignment (#​10669)
  • needle: intern the stored ttl values (#​10611)
  • super_block: intern the byte-encoded replica placements (#​10610)
  • throughput limits for replicate, EC shard, and worker-driven moves (#​10749)

Erasure coding

Interrupted-operation cleanup is the theme: encode, decode, and shard moves now roll back or resume into a consistent state, and a chaos harness exercises it.

  • refactor: extract EC orchestration into a shared weed/ec package (#​10760)
  • refactor: share volume and EC shard move logic between shell and workers (#​10727)
  • erasure_coding: share the EC shard teardown primitive (#​10740)
  • ec.encode: roll back a failed encode instead of leaving readonly volumes and orphan shards (#​10741)
  • ec.encode: require the shards to agree on size before deleting the volume (#​10769)
  • ec.decode: finish the cleanup an interrupted decode left behind (#​10767)
  • ec.decode: check the rebuilt .dat is complete before the shards can be deleted (#​10768)
  • EC worker: clear stale/interrupted shards at task start and on failure (#​10738)
  • ec: confirm a surviving copy before deleting a duplicate EC shard (#​10719)
  • EC: handle zero-sized shard files uniformly across moves, rebuilds, and startup cleanup (#​10753)
  • ec.balance: add a -volumeIds filter (#​10667)

Filer

  • filer: list directories without decoding chunk lists (#​10616)
  • filer: do not sweep children when deleting a folder non-recursively (#​10782)
  • filer: restore a folder that received an entry while it was deleted (#​10783)
  • filer: rebuild peer metadata subscriptions after a master reconnect (#​10648)
  • filer: retry and surface metadata replay failures from peers (#​10714)
  • filer: drain pending log chunk refs when the metadata stream ends (#​10647)
  • filer: add filer.meta.scan to audit one directory's change history (#​10645)
  • reload filer config on local metadata updates (#​10622)
  • log_buffer: end bounded reads that find the buffer empty (#​10750)
TUS
  • configurable TUS max upload size and session expiry (#​10638)
  • TUS concatenation extension (#​10702)
Filer stores (redis)
  • redis2: remove orphaned directory index members on listing (#​10735)
  • redis: remove orphaned directory index members on listing (#​10742)
  • redis2: harden the orphaned index member cleanup (#​10743)
  • redis2: expire entries without destroying a concurrent recreate (#​10744)
  • redis2: orphan cleanup existence checks must not read replicas (#​10745)

Mount

  • mount: stop churning the inode table on every readdir (#​10606)
  • mount: fix four readdir pagination bugs (#​10624)
  • mount: read oversized directories through instead of caching them (#​10631)
  • mount: let the kernel cache directory listings (#​10634)
  • mount: invalidate hot directory listings by section (#​10712)
  • windows mount: cache file data, resolved paths and attributes (#​10703)

S3 API

  • s3: add the RenameObject endpoint (#​10659)
  • s3api: fix ListObjectsV2 dropping objects under a partial prefix (#​10656)
  • s3: a key deleted after enabling versioning must leave the listing (#​10684)
  • s3: take bucket sizes from the master's summary (#​10664)
  • s3: option to disable bucket auto-creation on upload (#​10759)
  • s3api/policy_engine: prune dead code (#​10599)

Iceberg and S3 Tables

  • iceberg: make a table commit a compare-and-swap (#​10775)
  • iceberg: add view rename, scan-report and snapshots=refs to the catalog (#​10776)
  • iceberg: vend table-scoped credentials to clients that ask for delegation (#​10777)
  • iceberg: repair non-compliant manifests at commit (#​10641)
  • iceberg: route unprefixed requests to the first table bucket (#​10675)
  • iceberg maintenance: keep the snapshots that branches and tags pin (#​10774)
  • iceberg: let table properties override the worker config (#​10772)
  • iceberg: accept lowercase parquet file format when planning compaction (#​10751)
  • s3tables: add the maintenance configuration APIs (#​10773)
  • iceberg maintenance: fix the test build master merged broken (#​10780)

Shell

  • shell: volume.delete and volume.move accept a -timeout (#​10701)
  • shell: volume.move cleans up when aborted after the copy phase (#​10704)
  • shell: keep the source readonly when the incomplete target copy cannot be deleted (#​10705)
  • shell: multi-target fs.mergeVolumes and volume.mark -readonlyCanDelete (#​10706)
  • shell: parallelize volume balance moves (#​10737)
  • shell: send read jwt when downloading chunks in fs.mergeVolumes and fs.distributeChunks (#​10717)

Admin and workers

  • admin: dashboard counts chunks, not files (#​10598)
  • admin: show capacity per storage tier and stop counting remote-tiered bytes as local disk usage (#​10766)
  • admin: make paths relative (#​10709)
  • plugin scheduler: drain started jobs past the window close instead of killing them (#​10728)

Remote storage and tiering

  • read cold remote objects straight from the origin while caching (#​10731)
  • remote_storage: build all S3-compatible clients through one constructor (#​10720)

Security

  • master: gate raft membership RPCs behind the admin whitelist (#​10649)
  • volume: validate the file extension in CopyFile and ReceiveFile (#​10644)
  • volume: decode IPv6 transition addresses in the remote-endpoint guard (#​10683)
  • volume: extend the remote-endpoint guard to the azure backend (#​10754)
  • volume: validate replica targets and restrict gcs credentials in FetchAndWriteNeedle (#​10755)
  • sftp: url-encode the upload path (#​10758)
  • grpc: optional client_cert/client_key for outgoing mTLS connections (#​10747)
  • rust volume: mirror Go volume server logic to gate the admin RPCs (#​10748)

Rust volume server

  • rust: stop quarantining v2 volumes, load a disk's volumes concurrently (#​10602)
  • rust volume: mirror the VolumeConsolidateIndex RPC from Go (#​10752)
  • rust volume: mirror Go volume server logic to gate the admin RPCs (#​10748)

Clients

  • wdclient: keep the location of a volume reported added and removed at once (#​10635)
  • clients: stream the volume listings that ask for everything (#​10679)

Telemetry

  • telemetry: version distribution over time (#​10625)
  • telemetry: put the version pie back beside the stacked chart (#​10626)
  • telemetry: count erasure-coded volumes in the reported totals (#​10632)

Helm and deployment

  • helm: mark filer db-init ConfigMap volume optional (#​10596)
  • helm: enterprise license Secret, and a persistent-claim option for master data (#​10601)
  • helm: add support for schedulerName (#​10716)

Tests and CI

  • test: EC lifecycle chaos harness, with four fixes it found (#​10763)
  • test: systematic EC interruption verification, exhaustive model check plus deterministic kill matrix (#​10764)
  • test: re-lock and retry every chaos command, not just the balance (#​10770)
  • test: walk an EC volume through a multi-disk node's whole life (#​10721)
  • test: drive ec.encode/balance/rebuild E2E with a byte-identical payload check (#​10722)
  • test: assert EC shard identity and empty-view in multi-disk lifecycle tests (#​10723)
  • s3tables: add ClickHouse iceberg catalog integration test (#​10637)
  • clickhouse catalog test: cover latest ClickHouse and catalog-side CREATE TABLE (#​10707)
  • ci: run the gated redis store tests (#​10746)
  • test: let the vacuum shell session outlive the vacuum (#​10682)
  • mount: absorb the WinFsp metadata cache window in the concurrent-reader test (#​10636)
  • skiplist: fix TestFindGreaterOrEqual flake, compare against largest key, not value (#​10757)

Docs

Dependencies

  • bump github/codeql-action from 4.37.4 to 4.37.6 (#​10699)
  • bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.32 to 1.19.34 (#​10698)
  • bump cloud.google.com/go/kms from 1.31.0 to 1.33.0 (#​10697)
  • bump modernc.org/sqlite from 1.53.0 to 1.56.0 (#​10696)
  • bump github.com/pierrec/lz4/v4 from 4.1.27 to 4.1.28 (#​10695)
  • bump github.com/ydb-platform/ydb-go-sdk/v3 from 3.146.3 to 3.147.1 (#​10694)

New Contributors

Full Changelog: seaweedfs/seaweedfs@4.41...4.42

stretchr/testify (github.com/stretchr/testify)

v1.12.0

Compare Source

What's Changed

Functional Changes
Fixes
Documentation, Build & CI

New Contributors

Full Changelog: stretchr/testify@v1.11.0...v1.12.0

What's Changed

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team August 25, 2026 19:23
rappm
rappm previously approved these changes Aug 25, 2026
View reviewed changes
@rappm
rappm enabled auto-merge (squash) August 25, 2026 19:32
@renovate
renovate Bot force-pushed the renovate/all-non-major-dependencies branch from 5dc3b08 to 3b56312 Compare August 25, 2026 19:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@rappm rappm rappm left review comments

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@rappm