chore(deps): Bump the dev-dependencies group across 1 directory with 7 updates by dependabot[bot] · Pull Request #23 · ABCrimson/modern-cmdk

dependabot · 2026-03-16T10:21:02Z

Bumps the dev-dependencies group with 7 updates in the / directory:

Package	From	To
@biomejs/biome	`2.4.6`	`2.4.7`
happy-dom	`20.8.3`	`20.8.4`
lefthook	`2.1.3`	`2.1.4`
tsdown	`0.21.0`	`0.21.3`
shiki	`4.0.1`	`4.0.2`
@shikijs/twoslash	`4.0.1`	`4.0.2`
@vitejs/plugin-react	`6.0.0-beta.0`	`6.0.1`

Updates @biomejs/biome from 2.4.6 to 2.4.7

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.4.7

2.4.7

Patch Changes
#9318 3ac98eb Thanks @ematipico! - Added new nursery lint rule useBaseline for CSS. The rule reports when CSS properties, property values, at-rules, media conditions, functions, or pseudo-selectors are not part of the configured Baseline tier.

For example, at the time of writing, the rule will trigger for the use of accent-color because it has limited availability:
a {
  accent-color: bar;
}
#9272 2de8362 Thanks @terror! - Added the nursery rule useImportsFirst that enforces all import statements appear before any non-import statements in a module. Inspired by the eslint-plugin-import import/first rule.
// Invalid
import { foo } from "foo";
const bar = 1;
import { baz } from "baz"; // ← flagged
// Valid
import { foo } from "foo";
import { baz } from "baz";
const bar = 1;
#9285 93ea495 Thanks @dyc3! - Fixed noUndeclaredVariables from erroneously flagging props only used in the template section in Vue SFCs

#9435 6c5a8f2 Thanks @siketyan! - Fixed #9432: Values referenced as a JSX element in Astro/Vue/Svelte templates are now correctly detected; noUnusedImports and useImportType rules no longer reports these values as false positives.

#9362 fc9ca4c Thanks @Netail! - Extra rule source references. biome migrate eslint should do a bit better detecting rules in your eslint configurations.

#9392 b881fea Thanks @g-ortuno! - Fixed biomejs/biome-vscode#959: LSP now correctly resolves project directory when configurationPath points to a configuration file outside the workspace.

#9420 a1c46af Thanks @ematipico! - Fixed #9385: noUselessEscapeInString no longer incorrectly flags valid CSS hex escapes (e.g. \e7bb) as useless. The rule now recognizes all hex digits (0-9, a-f, A-F) as valid escape characters in CSS strings.

#9416 f2581b8 Thanks @ematipico! - Fixed #9131, #9112, #9166: the formatter no longer crashes or produces corrupt output when a JS file with experimentalEmbeddedSnippetsEnabled contains non-embedded template literals alongside embedded ones (e.g. console.log(\test`)next tographql(`...`)`).

#9344 cb4d7d7 Thanks @ematipico! - Fixed #6921: noShadow no longer incorrectly flags destructured variable bindings in sibling scopes as shadowing. Object destructuring, array destructuring, nested patterns, and rest elements are now properly recognized as declarations.

#9360 bc5dd99 Thanks @ematipico! - Fixed #7125: The rule noShadow no longer incorrectly flags parameters in TypeScript constructor and method overload signatures.

#9371 29cac17 Thanks @ematipico! - Fixed #5279: Tabs in diagnostic diff output are now rendered at a consistent width across context and changed lines, fixing visual misalignment when source files use tab indentation.

#9043 61e2a02 Thanks @dyc3! - Fixed #8897: Biome now parses @utility names containing / when Tailwind directives are enabled.

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.4.7

Patch Changes
#9318 3ac98eb Thanks @ematipico! - Added new nursery lint rule useBaseline for CSS. The rule reports when CSS properties, property values, at-rules, media conditions, functions, or pseudo-selectors are not part of the configured Baseline tier.

For example, at the time of writing, the rule will trigger for the use of accent-color because it has limited availability:
a {
  accent-color: bar;
}
#9272 2de8362 Thanks @terror! - Added the nursery rule useImportsFirst that enforces all import statements appear before any non-import statements in a module. Inspired by the eslint-plugin-import import/first rule.
// Invalid
import { foo } from "foo";
const bar = 1;
import { baz } from "baz"; // ← flagged
// Valid
import { foo } from "foo";
import { baz } from "baz";
const bar = 1;
#9285 93ea495 Thanks @dyc3! - Fixed noUndeclaredVariables from erroneously flagging props only used in the template section in Vue SFCs

#9435 6c5a8f2 Thanks @siketyan! - Fixed #9432: Values referenced as a JSX element in Astro/Vue/Svelte templates are now correctly detected; noUnusedImports and useImportType rules no longer reports these values as false positives.

#9362 fc9ca4c Thanks @Netail! - Extra rule source references. biome migrate eslint should do a bit better detecting rules in your eslint configurations.

#9392 b881fea Thanks @g-ortuno! - Fixed biomejs/biome-vscode#959: LSP now correctly resolves project directory when configurationPath points to a configuration file outside the workspace.

#9420 a1c46af Thanks @ematipico! - Fixed #9385: noUselessEscapeInString no longer incorrectly flags valid CSS hex escapes (e.g. \e7bb) as useless. The rule now recognizes all hex digits (0-9, a-f, A-F) as valid escape characters in CSS strings.

#9416 f2581b8 Thanks @ematipico! - Fixed #9131, #9112, #9166: the formatter no longer crashes or produces corrupt output when a JS file with experimentalEmbeddedSnippetsEnabled contains non-embedded template literals alongside embedded ones (e.g. console.log(\test`)next tographql(`...`)`).

#9344 cb4d7d7 Thanks @ematipico! - Fixed #6921: noShadow no longer incorrectly flags destructured variable bindings in sibling scopes as shadowing. Object destructuring, array destructuring, nested patterns, and rest elements are now properly recognized as declarations.

#9360 bc5dd99 Thanks @ematipico! - Fixed #7125: The rule noShadow no longer incorrectly flags parameters in TypeScript constructor and method overload signatures.

#9371 29cac17 Thanks @ematipico! - Fixed #5279: Tabs in diagnostic diff output are now rendered at a consistent width across context and changed lines, fixing visual misalignment when source files use tab indentation.

#9043 61e2a02 Thanks @dyc3! - Fixed #8897: Biome now parses @utility names containing / when Tailwind directives are enabled.

#9354 930c858 Thanks @denbezrukov! - Improved CSS parser recovery for invalid unicode-range values that mix wildcard ranges with range intervals. For example, Biome now reports clearer diagnostics for invalid syntax like:

... (truncated)

Commits

1f30838 ci: release (#9346)
3ac98eb feat(css/lint): useBaseline (#9318)
2de8362 feat(lint): add nursery rule useImportsFirst (#9272)
776cb64 feat(json_analyze): implement noEmptyObjectKeys (#9365)
dda9b3d chore: update rule count in readme (#9374)
722f0da feat(json_analyze): implement noTopLevelLiterals (#9367)
See full diff in compare view

Updates happy-dom from 20.8.3 to 20.8.4

Release notes

Sourced from happy-dom's releases.

v20.8.4

👷‍♂️ Patch fixes

Replace ConsoleConstructor import with indexed access type - By @YevheniiKotyrlo in task #1845

Commits

82a0888 fix: #1845 Replace ConsoleConstructor import with indexed access type (#2095)
See full diff in compare view

Updates lefthook from 2.1.3 to 2.1.4

Release notes

Sourced from lefthook's releases.

v2.1.4

Changelog

21479f941dcf73bd826cd169088983320fdc31d6 fix: bring back {lefthook_job_name} template (#1347)

c586f14d15cbef841c988420da6e21d903859764 fix: separate more commands' non-option args with -- (#1339)

8dcd4aef558c1676d0ac724e220d241a71e6a861 pkg: fix scripts (#1348)

2fac7285db9090f0e88478fdcb50353452250655 pkg: make it easier to read (#1340)

32af36b1b832891df7dfb7411b4c2e273aefc3d7 pkg: refactor packaging (2) (#1346)

5354773b454a8c5e7a916d909782661bc6b1f896 pkg: refactor packaging scripts (#1308)

Changelog

Sourced from lefthook's changelog.

2.1.4 (2026-03-12)

pkg: fix scripts (#1348) by @mrexox

fix: bring back {lefthook_job_name} template (#1347) by @mrexox

pkg: refactor packaging (2) (#1346) by @mrexox

fix: separate more commands' non-option args with -- (#1339) by @scop

docs: change logo to point to landing page instead of itself (#1343) by @igas

pkg: make it easier to read (#1340) by @mrexox

pkg: refactor packaging scripts (#1308) by @mrexox

Commits

83ec3a9 2.1.4: bring back {lefthook_job_name}
8dcd4ae pkg: fix scripts (#1348)
21479f9 fix: bring back {lefthook_job_name} template (#1347)
32af36b pkg: refactor packaging (2) (#1346)
c586f14 fix: separate more commands' non-option args with -- (#1339)
e021d4d docs: change logo to point to landing page istead of itself (#1343)
2fac728 pkg: make it easier to read (#1340)
5354773 pkg: refactor packaging scripts (#1308)
See full diff in compare view

Updates tsdown from 0.21.0 to 0.21.3

Release notes

Sourced from tsdown's releases.

v0.21.3

   🚀 Features

copy: Add support for watching copy source files - by @schplitt in rolldown/tsdown#721 (7c23a)

   🐞 Bug Fixes

css: Watch inline CSS files in watch mode - by @sxzz (2051a)

exports: Sort inlined dependencies by package name - by @sxzz (0ec71)

publint: Support Yarn v1 - by @sxzz (4a291)

unbundle: Root should be lowest common ancestor of entry files - by @sxzz (f1823)

    View changes on GitHub

v0.21.2

   🚨 Breaking Changes

exe: Add exe.outDir for separate executable output dir, defaults to build - by @sxzz (d49ef)

Note: Executable is still an experimental feature and does not follow SemVer. Breaking changes may occur in any release.

   🚀 Features

Add root option for controlling output directory structure - by @sxzz (bad2d)

deps: Rename onlyAllowBundle to onlyBundle - by @peaklabs-dev and @sxzz in rolldown/tsdown#819 (cbd7b)

   🐞 Bug Fixes

css: Skip data URIs and external URLs in CSS url() rebasing - by @sxzz (13907)

    View changes on GitHub

v0.21.1

   🚨 Breaking Changes

css: Move all CSS support to @tsdown/css package - by @sxzz in rolldown/tsdown#809 (1b1a1)
[!IMPORTANT] If you are using CSS features (e.g., CSS imports), you now need to manually install the @tsdown/css package:
npm install @tsdown/css -D
# or
pnpm add @tsdown/css -D
Note: CSS support is still an experimental feature and does not follow SemVer. Breaking changes may occur in any release.
🚀 Features

css:

... (truncated)

Commits

6151433 chore: release v0.21.3
7c23ad8 feat(copy): add support for watching copy source files (#721)
f182324 fix(unbundle): root should be lowest common ancestor of entry files
0d2c9c9 docs: improve React Compiler integration
6d03e92 chore: upgrade deps
e6ff7b5 chore: add confirmation prompt to release script
280eaed docs(exe): fix output directory example (#828)
2051a40 fix(css): watch inline CSS files in watch mode
0ec719d fix(exports): sort inlined dependencies by package name
4a29176 fix(publint): support Yarn v1
Additional commits viewable in compare view

Updates shiki from 4.0.1 to 4.0.2

Release notes

Sourced from shiki's releases.

v4.0.2

🐞 Bug Fixes

Support ANSI language with multiple themes - by @dan-lee in shikijs/shiki#1259 (2a232)

View changes on GitHub

Commits

7a1007d chore: release v4.0.2
ef42a16 chore: update deps
2a23230 fix: support ANSI language with multiple themes (#1259)
See full diff in compare view

Updates @shikijs/twoslash from 4.0.1 to 4.0.2

Release notes

Sourced from @shikijs/twoslash's releases.

v4.0.2

🐞 Bug Fixes

Support ANSI language with multiple themes - by @dan-lee in shikijs/shiki#1259 (2a232)

View changes on GitHub

Commits

7a1007d chore: release v4.0.2
See full diff in compare view

Updates @vitejs/plugin-react from 6.0.0-beta.0 to 6.0.1

Release notes

Sourced from @vitejs/plugin-react's releases.

plugin-react@6.0.1

Expand @rolldown/plugin-babel peer dep range (#1146)

Expanded @rolldown/plugin-babel peer dep range to include ^0.2.0.

plugin-react@6.0.0

Remove Babel Related Features (#1123)

Vite 8+ can handle React Refresh Transform by Oxc and doesn't need Babel for it. With that, there are no transform applied that requires Babel. To reduce the installation size of this plugin, babel is no longer a dependency of this plugin and the related features are removed.

If you are using Babel, you can use @rolldown/plugin-babel together with this plugin:
 import { defineConfig } from 'vite'
 import react from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [


react({



  babel: {



    plugins: ['@babel/plugin-proposal-throw-expressions'],



  },



}),





react(),



babel({



  plugins: ['@babel/plugin-proposal-throw-expressions'],



}),

]
})
For React compiler users, you can use reactCompilerPreset for easier setup with preconfigured filter to improve build performance:
 import { defineConfig } from 'vite'
-import react from '@vitejs/plugin-react'
+import react, { reactCompilerPreset } from '@vitejs/plugin-react'
+import babel from '@rolldown/plugin-babel'
export default defineConfig({
plugins: [

react({

 babel: {



   plugins: ['babel-plugin-react-compiler'],



 },


}),


react(),
babel({

 presets: [reactCompilerPreset()]



</tr></table>

... (truncated)

Changelog

Sourced from @vitejs/plugin-react's changelog.

6.0.1 (2026-03-13)

Expand @rolldown/plugin-babel peer dep range (#1146)

Expanded @rolldown/plugin-babel peer dep range to include ^0.2.0.

6.0.0 (2026-03-12)

Commits

1e94c06 release: plugin-react@6.0.1
77c00c0 feat(plugin-react): expand @rolldown/plugin-babel peer dep range (#1146)
dcc9012 release: plugin-react@6.0.0
3a17886 docs: add a link to the Oxlint rule for component exports alongside the ESLin...
f812135 fix(deps): update all non-major dependencies (#1140)
a0329a0 docs(react): clarify react compiler preset filter (#1137)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…7 updates Bumps the dev-dependencies group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.6` | `2.4.7` | | [happy-dom](https://github.com/capricorn86/happy-dom) | `20.8.3` | `20.8.4` | | [lefthook](https://github.com/evilmartians/lefthook) | `2.1.3` | `2.1.4` | | [tsdown](https://github.com/rolldown/tsdown) | `0.21.0` | `0.21.3` | | [shiki](https://github.com/shikijs/shiki/tree/HEAD/packages/shiki) | `4.0.1` | `4.0.2` | | [@shikijs/twoslash](https://github.com/shikijs/shiki/tree/HEAD/packages/twoslash) | `4.0.1` | `4.0.2` | | [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/tree/HEAD/packages/plugin-react) | `6.0.0-beta.0` | `6.0.1` | Updates `@biomejs/biome` from 2.4.6 to 2.4.7 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.7/packages/@biomejs/biome) Updates `happy-dom` from 20.8.3 to 20.8.4 - [Release notes](https://github.com/capricorn86/happy-dom/releases) - [Commits](capricorn86/happy-dom@v20.8.3...v20.8.4) Updates `lefthook` from 2.1.3 to 2.1.4 - [Release notes](https://github.com/evilmartians/lefthook/releases) - [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md) - [Commits](evilmartians/lefthook@v2.1.3...v2.1.4) Updates `tsdown` from 0.21.0 to 0.21.3 - [Release notes](https://github.com/rolldown/tsdown/releases) - [Commits](rolldown/tsdown@v0.21.0...v0.21.3) Updates `shiki` from 4.0.1 to 4.0.2 - [Release notes](https://github.com/shikijs/shiki/releases) - [Commits](https://github.com/shikijs/shiki/commits/v4.0.2/packages/shiki) Updates `@shikijs/twoslash` from 4.0.1 to 4.0.2 - [Release notes](https://github.com/shikijs/shiki/releases) - [Commits](https://github.com/shikijs/shiki/commits/v4.0.2/packages/twoslash) Updates `@vitejs/plugin-react` from 6.0.0-beta.0 to 6.0.1 - [Release notes](https://github.com/vitejs/vite-plugin-react/releases) - [Changelog](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite-plugin-react/commits/plugin-react@6.0.1/packages/plugin-react) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.4.7 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: happy-dom dependency-version: 20.8.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: lefthook dependency-version: 2.1.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: tsdown dependency-version: 0.21.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: shiki dependency-version: 4.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@shikijs/twoslash" dependency-version: 4.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies - dependency-name: "@vitejs/plugin-react" dependency-version: 6.0.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-03-16T10:21:03Z

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): Bump the dev-dependencies group across 1 directory with 7 updates#23

chore(deps): Bump the dev-dependencies group across 1 directory with 7 updates#23
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/dev-dependencies-e7bd11807e

dependabot bot commented on behalf of github Mar 16, 2026

Uh oh!

dependabot bot commented on behalf of github Mar 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Mar 16, 2026

Biome CLI v2.4.7

2.4.7

Patch Changes

2.4.7

Patch Changes

v20.8.4

👷‍♂️ Patch fixes

v2.1.4

Changelog

2.1.4 (2026-03-12)

v0.21.3

🚀 Features

🐞 Bug Fixes

View changes on GitHub

v0.21.2

🚨 Breaking Changes

🚀 Features

🐞 Bug Fixes

View changes on GitHub

v0.21.1

🚨 Breaking Changes

🚀 Features

v4.0.2

🐞 Bug Fixes

View changes on GitHub

v4.0.2

🐞 Bug Fixes

View changes on GitHub

plugin-react@6.0.1

Expand @rolldown/plugin-babel peer dep range (#1146)

plugin-react@6.0.0

Remove Babel Related Features (#1123)

6.0.1 (2026-03-13)

Expand @rolldown/plugin-babel peer dep range (#1146)

6.0.0 (2026-03-12)

Uh oh!

dependabot bot commented on behalf of github Mar 16, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Expand `@rolldown/plugin-babel` peer dep range (#1146)

Expand `@rolldown/plugin-babel` peer dep range (#1146)