chore(deps-dev): bump the development group across 1 directory with 7 updates by dependabot[bot] · Pull Request #496 · tempoxyz/docs

dependabot · 2026-06-15T11:47:25Z

Bumps the development group with 7 updates in the / directory:

Package	From	To
@biomejs/biome	`2.3.11`	`2.5.0`
@playwright/test	`1.58.0`	`1.61.0`
@types/node	`25.6.0`	`25.9.3`
@typescript/native-preview	`7.0.0-dev.20260122.3`	`7.0.0-dev.20260615.1`
tsx	`4.21.0`	`4.22.4`
typescript	`5.9.3`	`6.0.3`
vite-plugin-mkcert	`1.17.12`	`2.1.0`

Updates @biomejs/biome from 2.3.11 to 2.5.0

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.5.0

2.5.0

Minor Changes
#9539 f0615fd Thanks @ematipico! - Added a new reporter called concise. When --reporter=concise is passed the commands format, lint, check and ci, the diagnostics are printed in a compact manner:
! index.ts:2:10: lint/correctness/noUnusedImports: Several of these imports are unused.
! main.ts:9:7: lint/correctness/noUnusedVariables: This variable f is unused.
× index.ts:8:5: lint/suspicious/noImplicitAnyLet: This variable implicitly has the any type.
× main.ts:2:10: lint/suspicious/noRedeclare: Shouldn't redeclare 'z'. Consider to delete it or rename it.
#9495 2056b23 Thanks @aviraldua93! - Added the useKeyWithClickEvents a11y lint rule for HTML files (.html, .vue, .svelte, .astro). This is a port of the existing JSX rule. The rule enforces that elements with an onclick handler also have at least one keyboard event handler (onkeydown, onkeyup, or onkeypress) to ensure keyboard accessibility.

Inherently keyboard-accessible elements (<a>, <button>, <input>, <select>, <textarea>, <option>) are excluded, as are elements hidden from assistive technologies (aria-hidden) or with role="presentation" / role="none".

<div onclick="handleClick()">Click me</div>

<div onclick="handleClick()" onkeydown="handleKeyDown()">Click me</div>

<button onclick="handleClick()">Submit</button>
#9152 9ec8500 Thanks @ematipico! - Added new nursery lint rule noUndeclaredClasses for HTML, JSX, and SFC files (Vue, Astro, Svelte). The rule detects CSS class names used in class="..." (or className) attributes that are not defined in any <style> block or linked stylesheet reachable from the file.

<html>
  <head>
    <style>
      .button {
        color: blue;
      }
    </style>
  </head>
  <body>
    <div class="button typo"></div>
  </body>
</html>
#9152 9ec8500 Thanks @ematipico! - Added new nursery lint rule noUnusedClasses for CSS. The rule detects CSS class selectors that are never referenced in any HTML or JSX file that imports the stylesheet. This is a project-domain rule that requires the module graph.

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.5.0

Minor Changes
#9539 f0615fd Thanks @ematipico! - Added a new reporter called concise. When --reporter=concise is passed the commands format, lint, check and ci, the diagnostics are printed in a compact manner:
! index.ts:2:10: lint/correctness/noUnusedImports: Several of these imports are unused.
! main.ts:9:7: lint/correctness/noUnusedVariables: This variable f is unused.
× index.ts:8:5: lint/suspicious/noImplicitAnyLet: This variable implicitly has the any type.
× main.ts:2:10: lint/suspicious/noRedeclare: Shouldn't redeclare 'z'. Consider to delete it or rename it.
#9495 2056b23 Thanks @aviraldua93! - Added the useKeyWithClickEvents a11y lint rule for HTML files (.html, .vue, .svelte, .astro). This is a port of the existing JSX rule. The rule enforces that elements with an onclick handler also have at least one keyboard event handler (onkeydown, onkeyup, or onkeypress) to ensure keyboard accessibility.

Inherently keyboard-accessible elements (<a>, <button>, <input>, <select>, <textarea>, <option>) are excluded, as are elements hidden from assistive technologies (aria-hidden) or with role="presentation" / role="none".

<div onclick="handleClick()">Click me</div>

<div onclick="handleClick()" onkeydown="handleKeyDown()">Click me</div>

<button onclick="handleClick()">Submit</button>
#9152 9ec8500 Thanks @ematipico! - Added new nursery lint rule noUndeclaredClasses for HTML, JSX, and SFC files (Vue, Astro, Svelte). The rule detects CSS class names used in class="..." (or className) attributes that are not defined in any <style> block or linked stylesheet reachable from the file.

<html>
  <head>
    <style>
      .button {
        color: blue;
      }
    </style>
  </head>
  <body>
    <div class="button typo"></div>
  </body>
</html>
#9152 9ec8500 Thanks @ematipico! - Added new nursery lint rule noUnusedClasses for CSS. The rule detects CSS class selectors that are never referenced in any HTML or JSX file that imports the stylesheet. This is a project-domain rule that requires the module graph.
/* styles.css — .ghost is never used in any importing file */

... (truncated)

Commits

c0b9832 ci: release (#10499)
995c1ff feat(lint): add useFunctionComponentDefinition rule (#10498)
311c2b2 fix(biome_configuration): avoid Markdown links in JSON schema descriptions (#...
04c3f19 fix: docs and readme (#10584)
961f41c refactor(useExportType): improve docs and code (#10569)
78075b7 feat(useExportType): add style option (#10561)
6642895 feat: rule promotion for v2.5 (#10562)
9a5855e feat: noRestrictedDependencies (#10467)
608a62f Merge branch 'main' into chore/merge-main-into-next
0f29b83 feat(linter): implement useIncludes rule (#10516)
Additional commits viewable in compare view

Updates @playwright/test from 1.58.0 to 1.61.0

Release notes

Sourced from @playwright/test's releases.

v1.61.0

🔑 WebAuthn passkeys

New Credentials virtual authenticator, available via browserContext.credentials, lets tests register passkeys and answer navigator.credentials.create() / navigator.credentials.get() ceremonies in the page — no real hardware key required, works in all browsers:
const context = await browser.newContext();
// Seed a passkey your backend provisioned for a test user.
await context.credentials.create('example.com', {
id: credentialId,
userHandle,
privateKey,
publicKey,
});
await context.credentials.install();
const page = await context.newPage();
await page.goto('https://example.com/login');
// The page's navigator.credentials.get() is answered with the seeded passkey.
You can also let the app register a passkey once in a setup test, read it back with credentials.get(), and seed it into later tests — see Credentials for details.

🗃️ Web Storage

New WebStorage API, available via page.localStorage and page.sessionStorage, reads and writes the page's storage for the current origin:
await page.localStorage.setItem('token', 'abc');
const token = await page.localStorage.getItem('token');
const items = await page.sessionStorage.items();
New APIs

Network

apiResponse.securityDetails() and apiResponse.serverAddr() mirror the browser-side response.securityDetails() and response.serverAddr().

Browser and Screencast

New option artifactsDir in browserType.connectOverCDP() controls where artifacts such as traces and downloads are stored when attached to an existing browser.

New option cursor in screencast.showActions() controls the cursor decoration rendered for pointer actions.

The onFrame callback in screencast.start() now receives a timestamp of when the frame was presented by the browser.

Test runner

The testOptions.video option now supports the same set of modes as trace: new 'on-all-retries', 'retain-on-first-failure' and 'retain-on-failure-and-retries' values. See the video modes table for which runs are recorded and kept in each mode.

Supported expect.soft.poll(...).

New fullConfig.argv — a snapshot of process.argv from the runner process, handy for reading custom arguments passed after the -- separator.

New fullConfig.failOnFlakyTests mirrors the config option, so reporters can explain why a flaky run failed.

testInfo.errors now lists each sub-error of an AggregateError as a separate entry.

... (truncated)

Commits

1cc5a90 cherry-pick(#41295): chore: PLAYWRIGHT_TRACING_NO_WEBSOCKET_FRAMES and PLAYWR...
a6772bd cherry-pick(#41280): Revert "fix(trace-viewer): add keyboard navigation to `N...
8133dcf cherry-pick(#41283): docs: add Ubuntu 26.04 and Node.js 26.x to system requir...
812432e chore: mark v1.61.0 (#41277)
ac05145 fix(fetch): report serverAddr and securityDetails for reused sockets (#41267)
056efc9 fix(trace-viewer): add keyboard navigation to NetworkFilters component (#41...
41f7b9a chore: fixes uncovered by the .NET 1.61 roll (#41266)
ba50778 fix(mcp): assign caps as array for legacy --vision flag (#41253)
b8ee5ae docs: release notes for v1.61 (#41261)
49c1f69 fix(trace viewer): load trace from a local file (#41263)
Additional commits viewable in compare view

Updates @types/node from 25.6.0 to 25.9.3

Commits

See full diff in compare view

Updates @typescript/native-preview from 7.0.0-dev.20260122.3 to 7.0.0-dev.20260615.1

Commits

See full diff in compare view

Updates tsx from 4.21.0 to 4.22.4

Release notes

Sourced from tsx's releases.

v4.22.4

4.22.4 (2026-05-31)

Bug Fixes

resolve CommonJS directory requires inside dependencies (#803) (1ce8463)

This release is also available on:

npm package (@latest dist-tag)

v4.22.3

4.22.3 (2026-05-19)

Bug Fixes

decode typed loader source (dce02fc)

preserve entrypoint with TypeScript preload hooks (68f72f3)

This release is also available on:

npm package (@latest dist-tag)

v4.22.2

4.22.2 (2026-05-18)

Bug Fixes

preserve CJS JSON require in ESM hooks (35b700b)

preserve named exports from CommonJS TypeScript (11de737)

support module.exports require(esm) interop (cf8f199)

This release is also available on:

npm package (@latest dist-tag)

v4.22.1

4.22.1 (2026-05-17)

Bug Fixes

resolve tsconfig path aliases containing a colon (#780) (6979f28)

This release is also available on:

npm package (@latest dist-tag)

... (truncated)

Commits

1ce8463 fix: resolve CommonJS directory requires inside dependencies (#803)
dce02fc fix: decode typed loader source
68f72f3 fix: preserve entrypoint with TypeScript preload hooks
69455cf test: cover package exports for ambiguous ESM reexports
35b700b fix: preserve CJS JSON require in ESM hooks
ef807db chore: update testing dependencies
3917090 test: document compatibility test taxonomy
de8113f refactor: centralize Node capability facts
c1f62db test: consolidate tsconfig path edge coverage
4e08174 test: consolidate loader hook coverage
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for tsx since your current version.

Updates typescript from 5.9.3 to 6.0.3

Release notes

Sourced from typescript's releases.

TypeScript 6.0.3

For release notes, check out the release announcement blog post.

fixed issues query for TypeScript 6.0.0 (Beta).

fixed issues query for TypeScript 6.0.1 (RC).

fixed issues query for TypeScript 6.0.2 (Stable).

fixed issues query for TypeScript 6.0.3 (Stable).

Downloads are available on:

npm

TypeScript 6.0

For release notes, check out the release announcement blog post.

fixed issues query for TypeScript 6.0.0 (Beta).

fixed issues query for TypeScript 6.0.1 (RC).

fixed issues query for TypeScript 6.0.2 (Stable).

Downloads are available on:

npm

TypeScript 6.0 Beta

For release notes, check out the release announcement.

fixed issues query for Typescript 6.0.0 (Beta).

Downloads are available on:

npm

Commits

050880c Bump version to 6.0.3 and LKG
eeae9dd 🤖 Pick PR #63401 (Also check package name validity in...) into release-6.0 (#...
ad1c695 🤖 Pick PR #63368 (Harden ATA package name filtering) into release-6.0 (#63372)
0725fb4 🤖 Pick PR #63310 (Mark class property initializers as...) into release-6.0 (#...
607a22a Bump version to 6.0.2 and LKG
9e72ab7 🤖 Pick PR #63239 (Fix missing lib files in reused pro...) into release-6.0 (#...
35ff23d 🤖 Pick PR #63163 (Port anyFunctionType subtype fix an...) into release-6.0 (#...
e175b69 Bump version to 6.0.1-rc and LKG
af4caac Update LKG
8efd7e8 Merge remote-tracking branch 'origin/main' into release-6.0
Additional commits viewable in compare view

Updates vite-plugin-mkcert from 1.17.12 to 2.1.0

Release notes

Sourced from vite-plugin-mkcert's releases.

v2.1.0

2.1.0 (2026-06-03)

Features

Avoid shell execution for mkcert hosts (#124) (b7541de)

v2.0.0

2.0.0 (2026-04-09)

Bug Fixes

plugin: relax request generic default type (0c62aed)

Features

plugin: add ipv6 hosts to default list (8dfc9f7), closes #116

plugin: add apply option for plugin execution (9a58063), closes #112

plugin: detect mkcert binary from path (de2702c), closes #96

plugin: improve logger control and download progress (23f8cd4)

plugin: support proxy download and improve request handling (06f74b4)

BREAKING CHANGES

plugin: require Node.js >= 22.19.0.

Changelog

Sourced from vite-plugin-mkcert's changelog.

2.1.0 (2026-06-03)

Features

Avoid shell execution for mkcert hosts (#124) (b7541de)

2.0.0 (2026-04-09)

Bug Fixes

plugin: relax request generic default type (0c62aed)

Features

add ipv6 hosts to default list (8dfc9f7), closes #116

plugin: add apply option for plugin execution (9a58063), closes #112

plugin: detect mkcert binary from path (de2702c), closes #96

plugin: improve logger control and download progress (23f8cd4)

plugin: support proxy download and improve request handling (06f74b4)

BREAKING CHANGES

plugin: require Node.js >= 22.19.0.

Commits

97c68a4 chore(release): 2.1.0 [skip ci]
ef6f49a chore: update
b7541de feat: Avoid shell execution for mkcert hosts (#124)
0b2eeee chore(release): 2.0.0 [skip ci]
de2702c feat(plugin): detect mkcert binary from path
9a58063 feat(plugin): add apply option for plugin execution
0c62aed fix(plugin): relax request generic default type
a1e8e90 refactor(plugin): split lib helpers into utils modules
450a402 docs(plugin): add vite compatibility badge
23f8cd4 feat(plugin): improve logger control and download progress
Additional commits viewable in compare view

vercel · 2026-06-15T11:47:29Z

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
tempo-docs	Ready	Preview, Comment	Jun 22, 2026 11:48am

socket-security · 2026-06-15T11:48:06Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Quality
@types/node@25.9.3
tsx@4.22.4
@typescript/native-preview@7.0.0-dev.20260615.1
typescript@5.9.3 ⏵ 6.0.3	⁺¹	⁺¹
vite-plugin-mkcert@2.1.0
@biomejs/biome@2.5.0
@playwright/test@1.61.0

View full report

… updates Bumps the development group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.3.11` | `2.5.0` | | [@playwright/test](https://github.com/microsoft/playwright) | `1.58.0` | `1.61.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `25.6.0` | `25.9.3` | | [@typescript/native-preview](https://github.com/microsoft/typescript-go) | `7.0.0-dev.20260122.3` | `7.0.0-dev.20260615.1` | | [tsx](https://github.com/privatenumber/tsx) | `4.21.0` | `4.22.4` | | [typescript](https://github.com/microsoft/TypeScript) | `5.9.3` | `6.0.3` | | [vite-plugin-mkcert](https://github.com/liuweiGL/vite-plugin-mkcert) | `1.17.12` | `2.1.0` | Updates `@biomejs/biome` from 2.3.11 to 2.5.0 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.0/packages/@biomejs/biome) Updates `@playwright/test` from 1.58.0 to 1.61.0 - [Release notes](https://github.com/microsoft/playwright/releases) - [Commits](microsoft/playwright@v1.58.0...v1.61.0) Updates `@types/node` from 25.6.0 to 25.9.3 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `@typescript/native-preview` from 7.0.0-dev.20260122.3 to 7.0.0-dev.20260615.1 - [Changelog](https://github.com/microsoft/typescript-go/blob/main/CHANGES.md) - [Commits](https://github.com/microsoft/typescript-go/commits) Updates `tsx` from 4.21.0 to 4.22.4 - [Release notes](https://github.com/privatenumber/tsx/releases) - [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs) - [Commits](privatenumber/tsx@v4.21.0...v4.22.4) Updates `typescript` from 5.9.3 to 6.0.3 - [Release notes](https://github.com/microsoft/TypeScript/releases) - [Commits](microsoft/TypeScript@v5.9.3...v6.0.3) Updates `vite-plugin-mkcert` from 1.17.12 to 2.1.0 - [Release notes](https://github.com/liuweiGL/vite-plugin-mkcert/releases) - [Changelog](https://github.com/liuweiGL/vite-plugin-mkcert/blob/main/CHANGELOG.md) - [Commits](liuweiGL/vite-plugin-mkcert@v1.17.12...v2.1.0) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.4.16 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development - dependency-name: "@playwright/test" dependency-version: 1.60.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development - dependency-name: "@types/node" dependency-version: 25.9.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development - dependency-name: "@typescript/native-preview" dependency-version: 7.0.0-dev.20260608.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: development - dependency-name: tsx dependency-version: 4.22.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: development - dependency-name: typescript dependency-version: 6.0.3 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development - dependency-name: vite-plugin-mkcert dependency-version: 2.1.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: development ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-06-22T22:51:47Z

Looks like these dependencies are no longer updatable, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 15, 2026

vercel Bot deployed to Preview June 15, 2026 11:48 View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/development-00f5cbac0a branch from 7d2e665 to f44064b Compare June 19, 2026 13:05

vercel Bot deployed to Preview June 19, 2026 13:07 View deployment

dependabot Bot force-pushed the dependabot/npm_and_yarn/development-00f5cbac0a branch from f44064b to cc0d885 Compare June 22, 2026 11:47

vercel Bot deployed to Preview June 22, 2026 11:48 View deployment

dependabot Bot closed this Jun 22, 2026

dependabot Bot deleted the dependabot/npm_and_yarn/development-00f5cbac0a branch June 22, 2026 22:51

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps-dev): bump the development group across 1 directory with 7 updates#496

chore(deps-dev): bump the development group across 1 directory with 7 updates#496
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/development-00f5cbac0a

dependabot Bot commented on behalf of github Jun 15, 2026 •

edited

Loading

Uh oh!

vercel Bot commented Jun 15, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jun 15, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jun 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Biome CLI v2.5.0

2.5.0

Minor Changes

2.5.0

Minor Changes

v1.61.0

🔑 WebAuthn passkeys

🗃️ Web Storage

New APIs

Network

Browser and Screencast

Test runner

v4.22.4

4.22.4 (2026-05-31)

Bug Fixes

v4.22.3

4.22.3 (2026-05-19)

Bug Fixes

v4.22.2

4.22.2 (2026-05-18)

Bug Fixes

v4.22.1

4.22.1 (2026-05-17)

Bug Fixes

TypeScript 6.0.3

TypeScript 6.0

TypeScript 6.0 Beta

v2.1.0

2.1.0 (2026-06-03)

Features

v2.0.0

2.0.0 (2026-04-09)

Bug Fixes

Features

BREAKING CHANGES

2.1.0 (2026-06-03)

Features

2.0.0 (2026-04-09)

Bug Fixes

Features

BREAKING CHANGES

Uh oh!

vercel Bot commented Jun 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

socket-security Bot commented Jun 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

dependabot Bot commented on behalf of github Jun 22, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jun 15, 2026 •

edited

Loading

vercel Bot commented Jun 15, 2026 •

edited

Loading

socket-security Bot commented Jun 15, 2026 •

edited

Loading