Skip to content

chore(deps-dev): bump the dev-dependencies group across 1 directory with 10 updates - #939

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-5d9953e447
Open

chore(deps-dev): bump the dev-dependencies group across 1 directory with 10 updates#939
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-5d9953e447

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 23, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 10 updates in the / directory:

Package From To
@biomejs/biome 2.5.3 2.5.9
@changesets/cli 2.31.0 2.31.1
turbo 2.10.4 2.10.10
@neon-rs/cli 0.1.82 0.2.6
@tsconfig/node22 22.0.5 22.0.6
@clerk/backend 3.11.3 3.16.7
@supabase/postgrest-js 2.110.2 2.112.3
@supabase/supabase-js 2.110.2 2.112.3
fta-cli 3.0.0 3.0.1
@types/semver 7.7.1 7.8.0

Updates @biomejs/biome from 2.5.3 to 2.5.9

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.9

2.5.9

Patch Changes

  • #11321 41386f3 Thanks @​dyc3! - Fixed #11315: The CSS parser now recovers at declaration boundaries after bogus declarations, allowing subsequent valid declarations to be parsed.

  • #11248 57b197e Thanks @​yanthomasdev! - Expanded the environment variable metadata used by biome rage to include BIOME_BINARY, BIOME_LOG_FILE, and RUST_BACKTRACE as well as reworded explanations for better readability.

  • #11377 a8798ea Thanks @​Netail! - Added a new nursery rule useNamedLayer which disallows anonymous cascade layers.

    @layer {
  a {
    color: red;
  }
}

  • #11327 6771cf5 Thanks @​dyc3! - The HTML formatter now preserves meaningful blank lines in HTML, including spacing after elements with trailing spaces and blank lines between comment groups.

     <div>
   <!-- first group -->
+
   <!-- second group -->
 </div>

  • #10312 ba8aa18 Thanks @​dyc3! - Added the nursery rule useTailwindShorthandClasses, which suggests shorter Tailwind utility classes. For example, the rule suggests replacing w-4 h-4 with size-4.

  • #11333 715e0cd Thanks @​kkkhs! - Fixed #11328: lint/nursery/useExpect now recognizes Vitest Browser Mode expect.element() calls as assertions.

  • #11343 9b98211 Thanks @​johncarmack1984! - Fixed #11311: the CSS parser now accepts Tailwind container-query variant names in @variant, such as @xl and @max-xl. These previously produced a parse error and a noUnknownAtRules diagnostic.

    @variant @xl {
  div {
    background: red;
  }
}

  • #11220 3e8c488 Thanks @​santichausis! - Fixed #9541: noUndeclaredVariables, noUnusedImports, and noUnusedVariables now correctly recognise exported variables and functions declared in one embedded <script> block as usable from a sibling <script> block, in Svelte's <script module>/<script> pair and Vue's non-setup <script> blocks.

    For example, Biome no longer reports greet as undeclared in the following Svelte component:

    <script module>

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.9

Patch Changes

  • #11321 41386f3 Thanks @​dyc3! - Fixed #11315: The CSS parser now recovers at declaration boundaries after bogus declarations, allowing subsequent valid declarations to be parsed.

  • #11248 57b197e Thanks @​yanthomasdev! - Expanded the environment variable metadata used by biome rage to include BIOME_BINARY, BIOME_LOG_FILE, and RUST_BACKTRACE as well as reworded explanations for better readability.

  • #11377 a8798ea Thanks @​Netail! - Added a new nursery rule useNamedLayer which disallows anonymous cascade layers.

    @layer {
  a {
    color: red;
  }
}

  • #11327 6771cf5 Thanks @​dyc3! - The HTML formatter now preserves meaningful blank lines in HTML, including spacing after elements with trailing spaces and blank lines between comment groups.

     <div>
   <!-- first group -->
+
   <!-- second group -->
 </div>

  • #10312 ba8aa18 Thanks @​dyc3! - Added the nursery rule useTailwindShorthandClasses, which suggests shorter Tailwind utility classes. For example, the rule suggests replacing w-4 h-4 with size-4.

  • #11333 715e0cd Thanks @​kkkhs! - Fixed #11328: lint/nursery/useExpect now recognizes Vitest Browser Mode expect.element() calls as assertions.

  • #11343 9b98211 Thanks @​johncarmack1984! - Fixed #11311: the CSS parser now accepts Tailwind container-query variant names in @variant, such as @xl and @max-xl. These previously produced a parse error and a noUnknownAtRules diagnostic.

    @variant @xl {
  div {
    background: red;
  }
}

  • #11220 3e8c488 Thanks @​santichausis! - Fixed #9541: noUndeclaredVariables, noUnusedImports, and noUnusedVariables now correctly recognise exported variables and functions declared in one embedded <script> block as usable from a sibling <script> block, in Svelte's <script module>/<script> pair and Vue's non-setup <script> blocks.

    For example, Biome no longer reports greet as undeclared in the following Svelte component:

    <script module>
  export function greet() {
    console.log("Hello!");

... (truncated)

Commits

Updates @changesets/cli from 2.31.0 to 2.31.1

Release notes

Sourced from @​changesets/cli's releases.

@​changesets/cli@​2.31.1

Patch Changes

  • #2159 15cf592 Thanks @​ingvaldlorentzen! - Fixed already-published version detection with npm 12, which always wraps successful npm info --json output in an array. The unwrapped output made changeset publish treat every package as unpublished and fail attempting to republish existing versions.
Changelog

Sourced from @​changesets/cli's changelog.

2.31.1

Patch Changes

  • #2159 15cf592 Thanks @​ingvaldlorentzen! - Fixed already-published version detection with npm 12, which always wraps successful npm info --json output in an array. The unwrapped output made changeset publish treat every package as unpublished and fail attempting to republish existing versions.
Commits

Updates turbo from 2.10.4 to 2.10.10

Release notes

Sourced from turbo's releases.

Turborepo v2.10.10

What's Changed

Changelog

New Contributors

Full Changelog: vercel/turborepo@v2.10.9...v2.10.10

Turborepo v2.10.10-canary.3

What's Changed

... (truncated)

Commits

Updates @neon-rs/cli from 0.1.82 to 0.2.6

Commits
  • 8043a58 v0.2.6
  • 0213f55 Fix prepack script to not overwrite package.json
  • 5d8a3fb Clean up @​neon-rs/cli dependencies and build scripts
  • 78e1825 v0.2.5
  • 06871b2 Add cargo-messages to verdaccio proxy isolated packages
  • 5e63fde Add missing repository field to @​neon-rs/manifest package.json
  • d571d23 v0.2.4
  • 936c08c Fix repository URLs to match GitHub org for npm provenance
  • 817a885 v0.2.3
  • 7803686 Switch to npm OIDC trusted publishing and revert versions to 0.2.2
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for @​neon-rs/cli since your current version.


Updates @tsconfig/node22 from 22.0.5 to 22.0.6

Commits

Updates @clerk/backend from 3.11.3 to 3.16.7

Changelog

Sourced from @​clerk/backend's changelog.

3.16.7

Patch Changes

  • Fix Cookie header parsing in authenticateRequest() to follow RFC 6265 and guard against a non-string iss. Legitimate cookies and JWTs are unaffected. (#9466) by @​dominic-clerk

  • Updated dependencies [b815047]:

    • @​clerk/shared@​4.29.2

3.16.6

Patch Changes

  • Updated dependencies [7f5c294]:
    • @​clerk/shared@​4.29.1

3.16.5

Patch Changes

  • Billing applied-discount snapshots now include optional durationInCycles. Payment attempt and statement UIs use the original discount length instead of cycles remaining, and omit the duration copy when it is unavailable. (#9401) by @​mauricioabreu

  • Updated dependencies [81840b3, b7fb564, 44edcc9]:

    • @​clerk/shared@​4.29.0

3.16.4

Patch Changes

  • Update the lockUser() documentation to link to the current Rules page in the Clerk Dashboard. (#9372) by @​SarahSoutoul

3.16.3

Patch Changes

  • Updated dependencies [131edec]:
    • @​clerk/shared@​4.28.1

3.16.2

Patch Changes

3.16.1

Patch Changes

  • Use a root-relative link (/contact/support) for the passwordHasher "contact support" reference so the generated API reference renders it as an internal same-tab link instead of an external one. (#9347) by @​manovotny

... (truncated)

Commits
  • 2b83bd3 ci(repo): Version packages (#9467)
  • daae528 fix(backend): Remove unnecessary custom cookie parsing (#9466)
  • 6c63025 ci(repo): Version packages (#9447)
  • 45514ca ci(repo): Version packages (#9402)
  • 81840b3 fix(shared,clerk-js,backend,ui): use duration in cycles in payments and state...
  • 4edfb53 ci(repo): Version packages (#9387)
  • 167204b docs(backend): fix Dashboard links and method reference layout (#9372)
  • 195a09a ci(repo): Version packages (#9382)
  • d435282 ci(repo): Version packages (#9368)
  • aa86d9f feat(clerk-js,localizations,shared,ui): Add support for discounts/promo codes...
  • Additional commits viewable in compare view

Updates @supabase/postgrest-js from 2.110.2 to 2.112.3

Release notes

Sourced from @​supabase/postgrest-js's releases.

v2.112.3

2.112.3 (2026-08-11)

🩹 Fixes

  • supabase: add trace context headers to canonical CORS allow-list (#2603)
  • supabase: improve trace propagation sampling and diagnostics (#2604)

❤️ Thank You

v2.112.3-canary.0

2.112.3-canary.0 (2026-08-11)

🩹 Fixes

  • supabase: add trace context headers to canonical CORS allow-list (#2603)
  • supabase: improve trace propagation sampling and diagnostics (#2604)

❤️ Thank You

v2.112.2

2.112.2 (2026-08-06)

🩹 Fixes

  • realtime: prevent duplicate on bindings (#2594)
  • realtime: clear stale join payload on sign-out (#2597)

❤️ Thank You

v2.112.2-canary.1

2.112.2-canary.1 (2026-08-06)

🩹 Fixes

  • realtime: clear stale join payload on sign-out (#2597)

❤️ Thank You

v2.112.2-canary.0

2.112.2-canary.0 (2026-08-06)

... (truncated)

Changelog

Sourced from @​supabase/postgrest-js's changelog.

2.112.3 (2026-08-11)

This was a version bump only for @​supabase/postgrest-js to align it with other projects, there were no code changes.

2.112.2 (2026-08-06)

This was a version bump only for @​supabase/postgrest-js to align it with other projects, there were no code changes.

2.112.1 (2026-08-05)

This was a version bump only for @​supabase/postgrest-js to align it with other projects, there were no code changes.

2.112.0 (2026-08-03)

🩹 Fixes

  • postgrest: honour throwOnError when maybeSingle finds multiple rows (#2580)

❤️ Thank You

2.111.0 (2026-07-28)

This was a version bump only for @​supabase/postgrest-js to align it with other projects, there were no code changes.

2.110.9 (2026-07-27)

This was a version bump only for @​supabase/postgrest-js to align it with other projects, there were no code changes.

2.110.8 (2026-07-21)

This was a version bump only for @​supabase/postgrest-js to align it with other projects, there were no code changes.

2.110.7 (2026-07-16)

🩹 Fixes

  • postgrest: correct self-reference inference (#2525)

❤️ Thank You

2.110.6 (2026-07-15)

🩹 Fixes

  • postgrest: type hinted self-referencing embeds as arrays (#2520)

... (truncated)

Commits
  • 84beab1 chore(release): version 2.112.2 changelogs (#2599)
  • 07b27ee chore(release): version 2.112.1 changelogs (#2593)
  • 0136f34 chore(release): version 2.112.0 changelogs (#2589)
  • 4c13bf0 fix(postgrest): honour throwOnError when maybeSingle finds multiple rows (#2580)
  • 6331898 docs(postgrest): document that statusText may be empty over HTTP/2 (#2574)
  • a262492 chore(release): version 2.111.0 changelogs (#2572)
  • 18b5bb2 chore(release): version 2.110.9 changelogs (#2567)
  • 22050de chore(release): version 2.110.8 changelogs (#2546)
  • 150b00c chore(release): version 2.110.7 changelogs (#2533)
  • 5c18b62 fix(postgrest): correct self-reference inference (#2525)
  • Additional commits viewable in compare view

Updates @supabase/supabase-js from 2.110.2 to 2.112.3

Release notes

Sourced from @​supabase/supabase-js's releases.

v2.112.3

2.112.3 (2026-08-11)

🩹 Fixes

  • supabase: add trace context headers to canonical CORS allow-list (#2603)
  • supabase: improve trace propagation sampling and diagnostics (#2604)

❤️ Thank You

v2.112.3-canary.0

2.112.3-canary.0 (2026-08-11)

🩹 Fixes

  • supabase: add trace context headers to canonical CORS allow-list (#2603)
  • supabase: improve trace propagation sampling and diagnostics (#2604)

❤️ Thank You

v2.112.2

2.112.2 (2026-08-06)

🩹 Fixes

  • realtime: prevent duplicate on bindings (#2594)
  • realtime: clear stale join payload on sign-out (#2597)

❤️ Thank You

v2.112.2-canary.1

2.112.2-canary.1 (2026-08-06)

🩹 Fixes

  • realtime: clear stale join payload on sign-out (#2597)

❤️ Thank You

v2.112.2-canary.0

2.112.2-canary.0 (2026-08-06)

... (truncated)

Changelog

Sourced from @​supabase/supabase-js's changelog.

2.112.3 (2026-08-11)

🩹 Fixes

  • supabase: improve trace propagation sampling and diagnostics (#2604)
  • supabase: add trace context headers to canonical CORS allow-list (#2603)

❤️ Thank You

2.112.2 (2026-08-06)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.112.1 (2026-08-05)

🩹 Fixes

  • realtime: ensure setAuth doesn't disable token refresh (#2592)

❤️ Thank You

  • Eduardo Gurgel

2.112.0 (2026-08-03)

🚀 Features

  • supabase: move OpenTelemetry tracing to opt-in /tracing subpath (#2583)

🩹 Fixes

  • supabase: forward db retry option (#2571)

❤️ Thank You

2.111.0 (2026-07-28)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.110.9 (2026-07-27)

This was a version bump only for @​supabase/supabase-js to align it with other projects, there were no code changes.

2.110.8 (2026-07-21)

... (truncated)

Commits
  • e44447c fix(supabase): improve trace propagation sampling and diagnostics (#2604)
  • 9f0358c fix(supabase): add trace context headers to canonical CORS allow-list (#2603)
  • 84beab1 chore(release): version 2.112.2 changelogs (#2599)
  • 07b27ee chore(release): version 2.112.1 changelogs (#2593)
  • 1831402 fix(realtime): ensure setAuth doesn't disable token refresh (#2592)
  • 0136f34 chore(release): version 2.112.0 changelogs (#2589)
  • 2877b5b test(supabase): replace test-tracing harness with real-OTel unit and e2e cove...
  • a413544 feat(supabase): move OpenTelemetry tracing to opt-in /tracing subpath (#2583)
  • e6c975c fix(supabase): forward db retry option (#2571)
  • a262492 chore(release): version 2.111.0 changelogs (#2572)
  • Additional commits viewable in compare view

Updates fta-cli from 3.0.0 to 3.0.1

Release notes

Sourced from fta-cli's releases.

v3.0.1

Release v3.0.1

See CHANGELOG.md for details.

Changelog

Sourced from fta-cli's changelog.

v3.0.1

  • Upgraded various internal Rust dependencies
Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for fta-cli since your current version.


Updates @types/semver from 7.7.1 to 7.8.0

Commits

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 23, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 23, 2026 22:08
@dependabot @github

dependabot Bot commented on behalf of github Aug 23, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: supply-chain. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 23, 2026
@changeset-bot

changeset-bot Bot commented Aug 23, 2026 •
edited
Loading

Copy link
Copy Markdown

⚠️ No Changeset found

Latest commit: 2decce4

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

@dependabot
chore(deps-dev): bump the dev-dependencies group across 1 directory w…
2decce4 
…ith 10 updates

Bumps the dev-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.3` | `2.5.9` |
| [@changesets/cli](https://github.com/changesets/changesets/tree/HEAD/packages/cli) | `2.31.0` | `2.31.1` |
| [turbo](https://github.com/vercel/turborepo) | `2.10.4` | `2.10.10` |
| [@neon-rs/cli](https://github.com/neon-bindings/neon-rs) | `0.1.82` | `0.2.6` |
| [@tsconfig/node22](https://github.com/tsconfig/bases/tree/HEAD/bases) | `22.0.5` | `22.0.6` |
| [@clerk/backend](https://github.com/clerk/javascript/tree/HEAD/packages/backend) | `3.11.3` | `3.16.7` |
| [@supabase/postgrest-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/postgrest-js) | `2.110.2` | `2.112.3` |
| [@supabase/supabase-js](https://github.com/supabase/supabase-js/tree/HEAD/packages/core/supabase-js) | `2.110.2` | `2.112.3` |
| [fta-cli](https://github.com/sgb-io/fta) | `3.0.0` | `3.0.1` |
| [@types/semver](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/semver) | `7.7.1` | `7.8.0` |



Updates `@biomejs/biome` from 2.5.3 to 2.5.9
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.9/packages/@biomejs/biome)

Updates `@changesets/cli` from 2.31.0 to 2.31.1
- [Release notes](https://github.com/changesets/changesets/releases)
- [Changelog](https://github.com/changesets/changesets/blob/@changesets/cli@2.31.1/packages/cli/CHANGELOG.md)
- [Commits](https://github.com/changesets/changesets/commits/@changesets/cli@2.31.1/packages/cli)

Updates `turbo` from 2.10.4 to 2.10.10
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.10.4...v2.10.10)

Updates `@neon-rs/cli` from 0.1.82 to 0.2.6
- [Release notes](https://github.com/neon-bindings/neon-rs/releases)
- [Commits](neon-bindings/neon-rs@v0.1.82...v0.2.6)

Updates `@tsconfig/node22` from 22.0.5 to 22.0.6
- [Commits](https://github.com/tsconfig/bases/commits/HEAD/bases)

Updates `@clerk/backend` from 3.11.3 to 3.16.7
- [Release notes](https://github.com/clerk/javascript/releases)
- [Changelog](https://github.com/clerk/javascript/blob/main/packages/backend/CHANGELOG.md)
- [Commits](https://github.com/clerk/javascript/commits/@clerk/backend@3.16.7/packages/backend)

Updates `@supabase/postgrest-js` from 2.110.2 to 2.112.3
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/postgrest-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.112.3/packages/core/postgrest-js)

Updates `@supabase/supabase-js` from 2.110.2 to 2.112.3
- [Release notes](https://github.com/supabase/supabase-js/releases)
- [Changelog](https://github.com/supabase/supabase-js/blob/master/packages/core/supabase-js/CHANGELOG.md)
- [Commits](https://github.com/supabase/supabase-js/commits/v2.112.3/packages/core/supabase-js)

Updates `fta-cli` from 3.0.0 to 3.0.1
- [Release notes](https://github.com/sgb-io/fta/releases)
- [Changelog](https://github.com/sgb-io/fta/blob/main/CHANGELOG.md)
- [Commits](sgb-io/fta@v3.0.0...v3.0.1)

Updates `@types/semver` from 7.7.1 to 7.8.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/semver)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@changesets/cli"
  dependency-version: 2.31.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@clerk/backend"
  dependency-version: 3.16.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@neon-rs/cli"
  dependency-version: 0.2.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@supabase/postgrest-js"
  dependency-version: 2.112.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@supabase/supabase-js"
  dependency-version: 2.112.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@tsconfig/node22"
  dependency-version: 22.0.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@types/semver"
  dependency-version: 7.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: fta-cli
  dependency-version: 3.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: turbo
  dependency-version: 2.10.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/dev-dependencies-5d9953e447 branch from 38e3f5a to 2decce4 Compare August 25, 2026 04:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants