fix: bump the dependencies group with 3 updates by dependabot[bot] · Pull Request #219 · WFCD/profile-parser

dependabot · 2026-09-14T15:03:49Z

Bumps the dependencies group with 3 updates: @biomejs/biome, lint-staged and mocha.

Updates @biomejs/biome from 2.5.12 to 2.5.13

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.5.13

2.5.13

Patch Changes
#11379 07a0073 Thanks @Netail! - Added the nursery rule useLayeredStyles, which enforces that style rules are defined within a cascade layer and import rules to import its styles into a cascade layer.
/* Invalid */
@import 'foo.css';
.my-style {
color: red;
}
/* Valid */
@import 'foo.css' layer(base);
@layer base {
.my-style {
color: red;
}
}
#11667 e997900 Thanks @devtechedge! - Added the nursery rule useBetterDomTraversing, which prefers .firstChild, .firstElementChild, .closest(), and merged .querySelector() calls over positional DOM traversal.
element.childNodes[0];
element.children[0];
element.parentElement.parentElement;
element.querySelector("a").querySelector("b");
#11620 20e513a Thanks @jakeleventhal! - Fixed #11610, #11611, #11612, #11615, and #11616: Biome no longer fully infers an imported generic declaration just to apply its type arguments, restoring type-aware lint performance for large libraries such as Zod. This improves useRegexpExec, noFloatingPromises, noMisusedPromises, useNullishCoalescing, and noUnsafePlusOperands.

#11657 e322040 Thanks @ematipico! - Fixed #7495: noUselessConstructor now ignores TypeScript constructors that forward at least one argument to super, preserving constructors that narrow the subclass's accepted parameter types. The exemption also applies when the parent and child signatures are identical; JavaScript and zero-argument forwarding behavior are unchanged.

#11670 4969ee1 Thanks @ematipico! - Fixed #7076: useAriaPropsForRole and useFocusableInteractive no longer report non-focusable elements with role="separator". A separator with an explicit tabIndex or tabindex still requires aria-valuenow.

#11627 23aad6d Thanks @ematipico! - Fixed #6571 so Grit plugins can capture and inspect multiple named import specifiers.

#11631 00dbd3a Thanks @ematipico! - Reduced unnecessary type inference when type-aware lint rules inspect members of namespace imports from libraries such as Zod. Fixed type inference so blanket re-exports do not expose default exports.
#11628 a2f8ff7 Thanks @dyc3! - Added the nursery rule noXorAsExponentiation, which reports the bitwise XOR operator ^ between two decimal integer literals, where the exponentiation operator ** was likely intended.
const kibibyte = 2 ^ 10; // 8, not 1024

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.5.13

Patch Changes
#11379 07a0073 Thanks @Netail! - Added the nursery rule useLayeredStyles, which enforces that style rules are defined within a cascade layer and import rules to import its styles into a cascade layer.
/* Invalid */
@import 'foo.css';
.my-style {
color: red;
}
/* Valid */
@import 'foo.css' layer(base);
@layer base {
.my-style {
color: red;
}
}
#11667 e997900 Thanks @devtechedge! - Added the nursery rule useBetterDomTraversing, which prefers .firstChild, .firstElementChild, .closest(), and merged .querySelector() calls over positional DOM traversal.
element.childNodes[0];
element.children[0];
element.parentElement.parentElement;
element.querySelector("a").querySelector("b");
#11620 20e513a Thanks @jakeleventhal! - Fixed #11610, #11611, #11612, #11615, and #11616: Biome no longer fully infers an imported generic declaration just to apply its type arguments, restoring type-aware lint performance for large libraries such as Zod. This improves useRegexpExec, noFloatingPromises, noMisusedPromises, useNullishCoalescing, and noUnsafePlusOperands.

#11657 e322040 Thanks @ematipico! - Fixed #7495: noUselessConstructor now ignores TypeScript constructors that forward at least one argument to super, preserving constructors that narrow the subclass's accepted parameter types. The exemption also applies when the parent and child signatures are identical; JavaScript and zero-argument forwarding behavior are unchanged.

#11670 4969ee1 Thanks @ematipico! - Fixed #7076: useAriaPropsForRole and useFocusableInteractive no longer report non-focusable elements with role="separator". A separator with an explicit tabIndex or tabindex still requires aria-valuenow.

#11627 23aad6d Thanks @ematipico! - Fixed #6571 so Grit plugins can capture and inspect multiple named import specifiers.

#11631 00dbd3a Thanks @ematipico! - Reduced unnecessary type inference when type-aware lint rules inspect members of namespace imports from libraries such as Zod. Fixed type inference so blanket re-exports do not expose default exports.
#11628 a2f8ff7 Thanks @dyc3! - Added the nursery rule noXorAsExponentiation, which reports the bitwise XOR operator ^ between two decimal integer literals, where the exponentiation operator ** was likely intended.
const kibibyte = 2 ^ 10; // 8, not 1024
#11670 4969ee1 Thanks @ematipico! - Fixed #7192: noUnusedPrivateClassMembers now considers compound assignments such as ??= to read and use private class members.

... (truncated)

Commits

810ea56 ci: release (#11614)
e997900 feat(linter): add useBetterDomTraversing nursery rule (#11667)
de0528f feat(lint/html/svelte): add noSvelteAtHtmlTags (#11606)
07a0073 feat(css_analyze): implement useLayeredStyles (#11379)
c23e4c7 feat: noUnsafeIframeSandbox (#11622)
a2f8ff7 feat(lint/js): add noXorAsExponentiation (#11628)
a64d757 feat(lint/js/vue): add useVueBaseImport (#11595)
611767f chore: update depot logo (#11602)
See full diff in compare view

Updates lint-staged from 17.5.0 to 17.5.1

Release notes

Sourced from lint-staged's releases.

v17.5.1

Patch Changes

#1852 bfcca94 - Fix TypeScript issue TS1254 from defineConfig() by changing the signature from const to a function:

A 'const' initializer in an ambient context must be a string or numeric literal or literal enum reference.

Changelog

Sourced from lint-staged's changelog.

17.5.1

Patch Changes

#1852 bfcca94 - Fix TypeScript issue TS1254 from defineConfig() by changing the signature from const to a function:

A 'const' initializer in an ambient context must be a string or numeric literal or literal enum reference.

Commits

f8b1ab1 Merge pull request #1853 from lint-staged/changeset-release/main
3b54961 chore(changeset): release
09317ff Merge pull request #1852 from lint-staged/fix-ambient-declaration
bfcca94 fix: change defineConfig signature from const to a function
See full diff in compare view

Updates mocha from 12.0.0 to 12.0.1

Release notes

Sourced from mocha's releases.

v12.0.1

12.0.1 (2026-09-08)

🩹 Fixes

bump serialize-javascript to ^7.1.1 (#6278) (02558a3)

deps: update dependency find-up to v8 (#5747) (ee11d29)

deps: update dependency is-path-inside to v4 (#5748) (5b27e3a)

deps: update dependency starlight-blog to ^0.29.0 (#6248) (532b82b)

keep unknown config values from becoming test specs (#6244) (15aa7d1)

only reject positional args that are entirely numeric (#6222) (1633779)

reporter: split err.stack at trailing frame block so embedded stacks render once (#5997) (90f48e4)

📚 Documentation

blog: fixup v12 blog (#6258) (6bcbee4)

fix minor API documentation issue (#6241) (683fd10)

publish v12 stable blog (#6249) (d5ad803)

🧹 Chores

auto-add GitHub items to project (#5686) (d24c320)

convert lib/runner.js to ESM (#6260) (123b2d5)

deps: update actions/add-to-project action to v2 (#6276) (00f873b)

deps: update actions/github-script action to v9 (#6277) (49ed525)

deps: update dependency astro to v7.2.9 (#6223) (513bd50)

deps: update dependency eslint to v10.9.1 (#6251) (e28b90c)

deps: update dependency eslint-plugin-n to v18.3.0 (#6240) (3a11840)

deps: update dependency globals to v17.11.0 (#6243) (1cf345b)

deps: update dependency globals to v17.12.0 (#6288) (97b8df6)

deps: update dependency js-yaml to v5.4.1 (#6247) (9593caa)

deps: update dependency knip to v6.32.3 (#6224) (6781fa1)

deps: update dependency knip to v6.34.0 (#6279) (85ff1b6)

deps: update dependency rollup to v4.63.1 (#6274) (e5a779e)

deps: update dependency serialize-javascript to v7.1.0 (#6239) (77e4d4a)

deps: update dependency webpack to v5.110.1 (#6275) (ec436d5)

deps: update matteogabriele/agentscan-action action to v2.5.0 (#6280) (0bb7925)

remove unused .lintstagedrc.json (#6270) (d84fdbf)

update spam filter (#6271) (b932787)

use a junction to link the config fixture on Windows (#6218) (a6b5d98)

Changelog

Sourced from mocha's changelog.

12.0.1 (2026-09-08)

🩹 Fixes

bump serialize-javascript to ^7.1.1 (#6278) (02558a3)

deps: update dependency find-up to v8 (#5747) (ee11d29)

deps: update dependency is-path-inside to v4 (#5748) (5b27e3a)

deps: update dependency starlight-blog to ^0.29.0 (#6248) (532b82b)

keep unknown config values from becoming test specs (#6244) (15aa7d1)

only reject positional args that are entirely numeric (#6222) (1633779)

reporter: split err.stack at trailing frame block so embedded stacks render once (#5997) (90f48e4)

📚 Documentation

blog: fixup v12 blog (#6258) (6bcbee4)

fix minor API documentation issue (#6241) (683fd10)

publish v12 stable blog (#6249) (d5ad803)

🧹 Chores

auto-add GitHub items to project (#5686) (d24c320)

convert lib/runner.js to ESM (#6260) (123b2d5)

deps: update actions/add-to-project action to v2 (#6276) (00f873b)

deps: update actions/github-script action to v9 (#6277) (49ed525)

deps: update dependency astro to v7.2.9 (#6223) (513bd50)

deps: update dependency eslint to v10.9.1 (#6251) (e28b90c)

deps: update dependency eslint-plugin-n to v18.3.0 (#6240) (3a11840)

deps: update dependency globals to v17.11.0 (#6243) (1cf345b)

deps: update dependency globals to v17.12.0 (#6288) (97b8df6)

deps: update dependency js-yaml to v5.4.1 (#6247) (9593caa)

deps: update dependency knip to v6.32.3 (#6224) (6781fa1)

deps: update dependency knip to v6.34.0 (#6279) (85ff1b6)

deps: update dependency rollup to v4.63.1 (#6274) (e5a779e)

deps: update dependency serialize-javascript to v7.1.0 (#6239) (77e4d4a)

deps: update dependency webpack to v5.110.1 (#6275) (ec436d5)

deps: update matteogabriele/agentscan-action action to v2.5.0 (#6280) (0bb7925)

remove unused .lintstagedrc.json (#6270) (d84fdbf)

update spam filter (#6271) (b932787)

use a junction to link the config fixture on Windows (#6218) (a6b5d98)

Commits

5fbd134 chore(main): release 12.0.1 (#6257)
69f7631 fix(ci): fix for bug in Windows/node 26 (#6290)
97b8df6 chore(deps): update dependency globals to v17.12.0 (#6288)
85ff1b6 chore(deps): update dependency knip to v6.34.0 (#6279)
3a11840 chore(deps): update dependency eslint-plugin-n to v18.3.0 (#6240)
1cf345b chore(deps): update dependency globals to v17.11.0 (#6243)
d6824f7 ci: also test node 26 in ci (#6273)
1633779 fix: only reject positional args that are entirely numeric (#6222)
5f4b926 Change "needs: triage" to "status: in triage" (#6284)
02558a3 fix: bump serialize-javascript to ^7.1.1 (#6278)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

coderabbitai · 2026-09-14T15:03:56Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: e0eacf01-2bb0-433c-948e-f556e82c0a3d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

Bumps the dependencies group with 3 updates: [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome), [lint-staged](https://github.com/lint-staged/lint-staged) and [mocha](https://github.com/mochajs/mocha). Updates `@biomejs/biome` from 2.5.12 to 2.5.13 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.13/packages/@biomejs/biome) Updates `lint-staged` from 17.5.0 to 17.5.1 - [Release notes](https://github.com/lint-staged/lint-staged/releases) - [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md) - [Commits](lint-staged/lint-staged@v17.5.0...v17.5.1) Updates `mocha` from 12.0.0 to 12.0.1 - [Release notes](https://github.com/mochajs/mocha/releases) - [Changelog](https://github.com/mochajs/mocha/blob/main/CHANGELOG.md) - [Commits](mochajs/mocha@v12.0.0...v12.0.1) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.5.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: lint-staged dependency-version: 17.5.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: mocha dependency-version: 12.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

coveralls · 2026-09-20T22:22:32Z

Coverage Report for CI Build 35541396976

Warning

No base build found for commit 08ef336 on main.
Coverage changes can't be calculated without a base build.
If a base build is processing, this comment will update automatically when it completes.

Coverage: 62.215%

Details

Patch coverage: No coverable lines changed in this PR.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

Requires a base build to compare against. How to fix this →

Coverage Stats


Relevant Lines:	2295
Covered Lines:	1381
Line Coverage:	60.17%
Relevant Branches:	296
Covered Branches:	231
Branch Coverage:	78.04%
Branches in Coverage %:	Yes
Coverage Strength:	124.1 hits per line

💛 - Coveralls

github-actions · 2026-09-20T22:23:17Z

🎉 This PR is included in version 2.0.19 🎉

The release is available on:

Your semantic-release bot 📦🚀

dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 14, 2026

dependabot Bot requested a review from a team as a code owner September 14, 2026 15:03

dependabot Bot requested a review from SlayerOrnstein September 14, 2026 15:03

dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 14, 2026

TobiTenno force-pushed the dependabot-npm_and_yarn-dependencies-9e795245fc branch from e6c7100 to 1188c03 Compare September 20, 2026 22:19

TobiTenno changed the title ~~ci: bump the dependencies group with 3 updates~~ fix: bump the dependencies group with 3 updates Sep 20, 2026

TobiTenno enabled auto-merge (squash) September 20, 2026 22:20

TobiTenno approved these changes Sep 20, 2026

View reviewed changes

TobiTenno merged commit ac3efb5 into main Sep 20, 2026
9 checks passed

TobiTenno deleted the dependabot-npm_and_yarn-dependencies-9e795245fc branch September 20, 2026 22:22

github-actions Bot added the released label Sep 20, 2026

Navigation Menu

fix: bump the dependencies group with 3 updates - #219

fix: bump the dependencies group with 3 updates#219
TobiTenno merged 1 commit into
mainfrom
dependabot-npm_and_yarn-dependencies-9e795245fc

dependabot Bot commented on behalf of github Sep 14, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Sep 14, 2026 •

edited

Loading

Review skipped

Uh oh!

Uh oh!

coveralls commented Sep 20, 2026

Uh oh!

github-actions Bot commented Sep 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github Sep 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Biome CLI v2.5.13

2.5.13

Patch Changes

2.5.13

Patch Changes

v17.5.1

Patch Changes

17.5.1

Patch Changes

v12.0.1

12.0.1 (2026-09-08)

🩹 Fixes

📚 Documentation

🧹 Chores

12.0.1 (2026-09-08)

🩹 Fixes

📚 Documentation

🧹 Chores

Uh oh!

coderabbitai Bot commented Sep 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

Uh oh!

coveralls commented Sep 20, 2026

Coverage Report for CI Build 35541396976

Coverage: 62.215%

Details

Uncovered Changes

Coverage Regressions

Coverage Stats

💛 - Coveralls

Uh oh!

github-actions Bot commented Sep 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot Bot commented on behalf of github Sep 14, 2026 •

edited

Loading

coderabbitai Bot commented Sep 14, 2026 •

edited

Loading