Skip to content

chore(deps-dev): bump the dev-dependencies group across 1 directory with 13 updates - #865

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-ebf774faf4
Closed

chore(deps-dev): bump the dev-dependencies group across 1 directory with 13 updates#865
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/dev-dependencies-ebf774faf4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 28, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the dev-dependencies group with 13 updates in the / directory:

Package From To
@biomejs/biome 2.4.16 2.5.7
knip 6.25.0 6.32.0
lefthook 2.1.9 2.1.10
tsx 4.23.0 4.23.11
turbo 2.10.4 2.10.9
ultracite 7.8.3 7.10.1
@tailwindcss/postcss 4.3.2 4.3.3
postcss 8.5.16 8.5.26
prettier 3.9.4 3.9.6
tailwindcss 4.3.2 4.3.3
tsdown 0.22.3 0.22.14
concurrently 10.0.3 10.0.4
@types/mjml-core 5.0.0 5.1.0

Updates @biomejs/biome from 2.4.16 to 2.5.7

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.7

2.5.7

Patch Changes

  • #10822 c171b3b Thanks @​pkallos! - Added the option ignoreIfStatements to useNullishCoalescing. Biome now flags if statements that only assign to a nullish variable (such as if (!a) { a = b }) and can rewrite them to ??=. When enabled, Biome ignores those if statements.

  • #11136 e63354c Thanks @​AkashNaickar! - Added a new nursery rule noExtendNative, which reports extending the prototype of a built-in object.

  • #10094 e007143 Thanks @​THEjacob1000! - Added the nursery rule noTailwindArbitraryValue. Biome now reports Tailwind CSS arbitrary values such as w-[400px], including in HTML/JSX class attributes, configured utility functions, and tagged templates.

  • #11184 135f476 Thanks @​subotac! - Fixed #11176: noUnknownPseudoClass now recognizes Vue's :deep() pseudo-class inside .vue style blocks.

  • #8239 a519f9d Thanks @​cormacrelf! - Fixed #8233, where Biome CLI in stdin mode didn't work correctly when handling files in projects with nested configurations. For example, with the following structure, --stdin-file-path=subdirectory/... would not use the nested configuration in subdirectory/biome.json:

    ├── biome.json
└── subdirectory
    ├── biome.json
    └── lib.js

    biome format --write --stdin-file-path=subdirectory/lib.js < subdirectory/lib.js

    Now, the nested configuration is correctly picked up and applied.

    In addition, Biome now shows a warning if --stdin-file-path is provided but that path is ignored and therefore not formatted or fixed.

  • #11138 8c2c6bd Thanks @​ematipico! - Fixed noUnnecessaryConditions: Biome now chooses the same function overload as TypeScript when an argument is a callback, so conditions that were previously missed are reported.

    The following code is now invalid, because a parameter typed () => void accepts an async callback and schedule therefore returns string:

    declare function schedule(handler: () => void): string;
declare function schedule(handler: () => Promise<void>): string | undefined;
schedule(async () => {}) ?? "fallback";

    The following code is also now invalid, because map(() => 42) returns 42:

    

    • 






... (truncated)





Changelog

Sourced from @​biomejs/biome's changelog.




2.5.7


Patch Changes


    

  • 

    #10822 c171b3b Thanks @​pkallos! - Added the option ignoreIfStatements to useNullishCoalescing. Biome now flags if statements that only assign to a nullish variable (such as if (!a) { a = b }) and can rewrite them to ??=. When enabled, Biome ignores those if statements.
    

    • 

  • 

    #11136 e63354c Thanks @​AkashNaickar! - Added a new nursery rule noExtendNative, which reports extending the prototype of a built-in object.
    

    • 

  • 

    #10094 e007143 Thanks @​THEjacob1000! - Added the nursery rule noTailwindArbitraryValue. Biome now reports Tailwind CSS arbitrary values such as w-[400px], including in HTML/JSX class attributes, configured utility functions, and tagged templates.
    

    • 

  • 

    #11184 135f476 Thanks @​subotac! - Fixed #11176: noUnknownPseudoClass now recognizes Vue's :deep() pseudo-class inside .vue style blocks.
    

    • 

  • 

    #8239 a519f9d Thanks @​cormacrelf! - Fixed #8233, where Biome CLI in
stdin mode didn't work correctly when handling files in projects with nested
configurations. For example, with the following structure,
--stdin-file-path=subdirectory/... would not use the nested configuration in
subdirectory/biome.json:
    

    ├── biome.json
└── subdirectory
    ├── biome.json
    └── lib.js

    

    biome format --write --stdin-file-path=subdirectory/lib.js < subdirectory/lib.js
    

    Now, the nested configuration is correctly picked up and applied.
    

    In addition, Biome now shows a warning if --stdin-file-path is provided but
that path is ignored and therefore not formatted or fixed.
    

    • 

  • 

    #11138 8c2c6bd Thanks @​ematipico! - Fixed noUnnecessaryConditions: Biome now chooses the same function overload as TypeScript when an argument is a callback, so conditions that were previously missed are reported.
    

    The following code is now invalid, because a parameter typed () => void accepts an async callback and schedule therefore returns string:
    

    declare function schedule(handler: () => void): string;
declare function schedule(handler: () => Promise<void>): string | undefined;
schedule(async () => {}) ?? "fallback";
    

    The following code is also now invalid, because map(() => 42) returns 42:
    

    type Mapper<T> = () => T;
declare function map<T>(mapper: Mapper<T>): T;
    

    • 






... (truncated)





Commits






Updates knip from 6.25.0 to 6.32.0



Release notes

Sourced from knip's releases.




Release 6.32.0


    

  • fix: attribute wildcard subpath-import aliases as dependency usage (#1918) (4890a2ad5317b9e3f0ab844631ad0f0592802c3e) - thanks @​jsmecham!
    • 

  • Add Borp plugin (5eb9ad4cfb2ccb7770eac49f6109459d30590211)
    • 

  • Add tsd plugin (bd4ae7041f3fc6aef27b027644f80daefc432aca)
    • 

  • Resolve Rollup --config argument as plugin configuration (8111f97981406f4327d5e6a655c13308a9dc4426)
    • 

  • Resolve babel-jest configFile from Jest transform options (24794ccecb80fdaecfe4d46a26faff46c30d9015)
    • 

  • Add pre-commit plugin (ac726b0918cb931a6d538797e342484812a6752e)
    • 

  • Thread script words through resolvers to preserve quoting (89f9ada6ca81229bf8f7293439998acc5f87d457)
    • 

  • Resolve entries from Mocha script arguments (353f860f8e32f05f7c87dc5501071befc0e5a293)
    • 

  • Detect Node test runner through c8 (fa44be722aa35c6e8b441cd8cd0f4cf644027c22)
    • 

  • Update dependencies (non-major) (#1922) (6b1e6f3cbb1749776e3798f46eb2b99cd95ed56a) - thanks @​renovate[bot]!
    • 

  • fix(playwright): match config files with .cjs, .cts and .mts extensions (#1919) (1c1073a1817fdb3bcd3dc00eda2b1d858e444156) - thanks @​davidpavlovschi!
    • 

  • Restart VS Code language server process (resolve #1923) (d48eac5a2447567a33e835ce3e1648bf3f4ffb2b)
    • 

  • Classify built-ins from module specifiers (resolve #1925) (3528c5d0f808b7b2155f69a1f98493ee0e3e06c1)
    • 

  • Don't turn absolute-path script tokens into entries (resolve #1928) (e5608e77b434145c8dd5c2c2872bfb90ae622ce7)
    • 

  • Update sponsors data (025884bb53eede041732723197ac0415a1a50f71)
    • 

  • Update dependencies (d2c0a07c09cea70ab2cae5f97d12da272a6e43e6)
    • 



Release 6.31.0


    

  • feat: Add basic support for Marko 6 and 5 (#1914) (c6b151642701f9b4864ddb5ea8e40580623f59d1) - thanks @​caseycarroll!
    • 

  • Use Array.from in Marko compiler (5aadf47a22bdfd43bb8ad4082768e07fe37fc5ca)
    • 

  • Update release-it and fix release script flags (6fa9c269c65c0923965924226a5ccf0778842967)
    • 

  • Downgrade @​types/vscode to match extension engines range (6d8e9bf5200cf982d0bc801469c4e2be5627e5b8)
    • 



Release 6.30.0


    

  • docs: migrate to Starlight Blog plugin (#1854) (c89e3e3c9) - thanks @​trueberryless!
    • 

  • Include workspace dependencies in scoped runs (resolve #1901) (a75309eda)
    • 

  • Simplify workspace assembly (b3ac16411)
    • 

  • Document export declaration safety (ef98a7682)
    • 

  • Read object jsPlugin specifiers from Vite+ config (#1879) (3ea6a92d4) - thanks @​matchai!
    • 

  • Compile gitignore negations once (6884cdb20)
    • 

  • Cache Node test script detection (d970f67d8)
    • 

  • Track only enabled workspace plugins (67d48268a)
    • 

  • Skip unsupported Vite config command (545bb2d36)
    • 

  • Add SARIF reporter (ce11cf5d4)
    • 

  • Track catalog refs in pnpm dlx scripts (resolve #1885, close #1886) (102189a1a)
    • 

  • Report unresolved catalog references (b2b86c3e5)
    • 

  • Track catalog references across scoped runs (resolve #1905) (f0365bae0)
    • 

  • Track script catalog references across scoped runs (9b3ab3778)
    • 

  • Remove tsc from ignoreBinaries (a0a283040)
    • 

  • fix: detect dynamic imports in Svelte component templates (#1908) (aa303fb04) - thanks @​firatciftci!
    • 

  • fix(remark): support all types of dependency names (#1911) (3441bea3a) - thanks @​voxpelli!
    • 

  • Update sanity snapshot (d04aa04e5)
    • 

  • feat(stryker): add ts extensions (#1910) (cfc50886e) - thanks @​christopher-buss!
    • 

  • Adopt @​e18e/eslint-plugin (adf2511ab)
    • 

  • Remove Workleap from sponsors (d4f6af9ff)
    • 

  • Update dependencies (3f61542f6)
    • 

  • Add ES2023 array types to TypeScript 5 CI (360a47157)
    • 

  • Update sentry snapshot (7defc1853)
    • 

  • Analyze published type dependencies (resolve #1909) (#1912) (87d713e52)
    • 






... (truncated)





Commits

    

  • f21bcbb Release knip@6.32.0
    • 

  • d2c0a07 Update dependencies
    • 

  • e5608e7 Don't turn absolute-path script tokens into entries (resolve #1928)
    • 

  • 3528c5d Classify built-ins from module specifiers (resolve #1925)
    • 

  • 1c1073a fix(playwright): match config files with .cjs, .cts and .mts extensions (#1919)
    • 

  • fa44be7 Detect Node test runner through c8
    • 

  • 353f860 Resolve entries from Mocha script arguments
    • 

  • 89f9ada Thread script words through resolvers to preserve quoting
    • 

  • ac726b0 Add pre-commit plugin
    • 

  • 24794cc Resolve babel-jest configFile from Jest transform options
    • 

  • Additional commits viewable in compare view
    • 







Updates lefthook from 2.1.9 to 2.1.10



Release notes

Sourced from lefthook's releases.




v2.1.10


Changelog


    

  • c0a32e900407bf3e2e97c99a7dd2e3f2864ba13a deps: July 2026 (#1463)
    • 

  • 0b87ca6dc643dab804a1aad59c24003ef147c11a deps: June 2026 (#1447)
    • 

  • afce7244cf02abaf996ebe87bb557a725e46993e deps: migrate shellescape to al.essio.dev/pkg/shellescape (#1443)
    • 

  • fbb61b369b57a17469bd6997d1624608ce977f61 feat: AI coding agents integration (#1448)
    • 

  • cbfb4a5db29b46ac8bf399665cd9ada81022b848 fix: make test suite stable when NO_COLOR is set (#1449)
    • 








Changelog

Sourced from lefthook's changelog.




2.1.10 (2026-07-08)








Commits






Updates tsx from 4.23.0 to 4.23.11



Release notes

Sourced from tsx's releases.




v4.23.11


4.23.11 (2026-08-07)


Bug Fixes


    

  • preserve async ESM require fallback (55cbece)
    • 





This release is also available on:



v4.23.10


4.23.10 (2026-08-07)


Bug Fixes





This release is also available on:



v4.23.9


4.23.9 (2026-08-06)


Bug Fixes


    

  • map Node test locations (2f55884)
    • 

  • support data URLs in tsImport (b94f46f)
    • 





This release is also available on:



v4.23.8


4.23.8 (2026-08-05)


Bug Fixes


    

  • preserve package subpath resolution (be1315e)
    • 

  • preserve typeless ESM dependency exports (70dfc5e)
    • 





This release is also available on:






... (truncated)





Commits

    

  • bd3bc64 test: cover CommonJS loader source fallback
    • 

  • 55cbece fix: preserve async ESM require fallback
    • 

  • 6c5ba85 docs: document CommonJS default interop
    • 

  • ec1bcd5 fix: support nyc coverage discovery (#710)
    • 

  • b6e5b48 docs: clarify CommonJS default imports
    • 

  • 2f55884 fix: map Node test locations
    • 

  • de935d5 docs: document Node source-map stack formatting
    • 

  • b94f46f fix: support data URLs in tsImport
    • 

  • be1315e fix: preserve package subpath resolution
    • 

  • 5efba41 docs: organize transform backend research
    • 

  • Additional commits viewable in compare view
    • 







Updates turbo from 2.10.4 to 2.10.9



Release notes

Sourced from turbo's releases.




Turborepo v2.10.9



What's Changed


Changelog






... (truncated)





Commits






Updates ultracite from 7.8.3 to 7.10.1



Release notes

Sourced from ultracite's releases.




ultracite@7.10.1


Patch Changes


    

  • d018b7f: Fix several agent fix mode (fix --claude/--codex) issues: runs no longer abort with ENOBUFS when linter JSON output exceeds 1MB, user-supplied format/reporter flags can no longer override the JSON reporter and break parsing, a stuck agent process is force-killed 10 seconds after the timeout instead of hanging forever, and the progress renderer no longer garbles TTY output when file paths and rule names exceed the terminal width.
    • 

  • d018b7f: Fix Biome config migration leaving the legacy bare "extends": ["ultracite"] form in place, which breaks Biome's module resolution since the package has no root export. It's now mapped to ultracite/biome/core.
    • 

  • d018b7f: Fix ultracite doctor reporting spurious failures: config checks now walk up parent directories (matching check/fix and the linters themselves) so monorepo packages inheriting a root config pass, .oxlintrc.json is accepted as a valid oxlint config (with a migration suggestion), and Prettier/Stylelint configs declared via package.json keys are recognized.
    • 

  • d018b7f: Fix ultracite init corrupting existing Prettier/Stylelint/ESLint configs by writing an ESM module into JSON/YAML/TOML/CJS config files (e.g. .prettierrc, eslint.config.cjs). Updates now write the default .mjs config instead and remove the incompatible file so it can't shadow the new one.
    • 

  • d018b7f: Fix ultracite check/fix misrouting space-separated flag values (e.g. --max-warnings 10) into the file list, which scrambled the underlying linter invocation and made formatters fail on bogus targets. Positional files listed before a -- separator are also kept as lint targets instead of being reclassified as passthrough, which could silently widen formatter runs to the whole project.
    • 

  • d018b7f: Fix Lefthook and pre-commit YAML updates silently doing nothing on common config shapes: the Lefthook job is now inserted correctly when jobs: isn't the first key under pre-commit: (and no longer matches a jobs: key in a different hook), repos: [] in .pre-commit-config.yaml is handled, and shapes that can't be safely edited produce a warning instead of writing the file back unchanged.
    • 

  • d018b7f: Fix the Husky integration overwriting an existing .husky/pre-commit hook: ultracite init ran husky init, which unconditionally replaces the hook with npm test. It now runs plain husky to set up the hooks infrastructure without touching the hook file.
    • 

  • d018b7f: Fix ultracite init destroying user files it couldn't parse or merge: unparseable tsconfig.json files are no longer replaced with a minimal config, unparseable .vscode/.zed settings are no longer overwritten wholesale, and lint-staged configs with function-valued entries are left untouched — all now warn and skip instead.
    • 

  • d018b7f: Fix re-running ultracite init on an oxlint setup silently enabling the full js-plugins preset — the previously selected JS plugins are now preserved when no new selection is made. Init also no longer flips an explicit "type": "commonjs" in package.json to "module"; it warns instead.
    • 

  • d018b7f: Fix switching linters removing storybook from the project's dependencies. It was swept into the removal set as a peer of eslint-plugin-storybook, but it's a user-facing tool a project may use independently of linting.
    • 

  • d018b7f: Fix Stylelint target generation dropping directories with a dot in their name (e.g. app.web) and producing non-matching globs from Windows-style backslash paths. Framework detection also handles negated workspace patterns (!packages/legacy) again.
    • 

  • d018b7f: Fix the CLI becoming a silent no-op (exiting 0 without linting anything) when a generic TEST environment variable is set, as is common in CI matrices. The internal test guard now uses ULTRACITE_TEST.
    • 

  • 36c7b80: Move @​typescript-eslint/utils from dependencies to devDependencies. It was accidentally shipped as a runtime dependency in 7.9.0, pulling eslint and the typescript-eslint packages into every consumer's install (including oxlint-only setups) via npm's automatic peer dependency installation. Nothing in the published package imports it — it only exists to support the workspace-internal rule-parity script.
    • 



ultracite@7.10.0


Minor Changes


    

  • 

    cd0a36c: Add --claude and --codex flags to ultracite fix. After the normal autofix pass, remaining diagnostics are handed to the Claude Code or Codex CLI non-interactively, one agent run per affected file, with a live per-issue spinner that flips to ✓/✗ once the fix is verified by a re-lint. Fixes that don't survive verification are retried (up to 3 attempts per file) with the fresh diagnostics and feedback that the previous approach failed. Works with all three linter modes (Oxlint, Biome, ESLint); exits non-zero if any issues remain, matching the plain fix contract.
    

    • 

  • 

    e089510: Scope React Doctor's framework-specific rules to per-framework add-on presets (#752)
    

    The ultracite/oxlint/js-plugins preset no longer enables React Doctor's nextjs-* and TanStack (query-*, tanstack-start-*) rules for every consumer. Rules like nextjs-no-img-element and tanstack-start-no-anchor-element fire on plain <img>/<a> JSX and recommend framework replacements, which falsely errored in Vite + React and other non-Next/non-TanStack projects.
    

    Those rules now live in two new add-on presets:
    

      

    • ultracite/oxlint/next/js-plugins
      • 

    • ultracite/oxlint/tanstack/js-plugins
      • 

    

    ultracite init wires the matching add-on automatically when you select the framework together with oxlint-plugin-react-doctor. If you manage oxlint.config.ts by hand and use Next.js or TanStack, add the matching add-on preset to extends alongside js-plugins to keep those rules — or re-run npx ultracite init.
    

    Also fixes re-running init on a config that already extends js-plugins producing a duplicate import jsPlugins declaration.
    

    • 



Patch Changes


    

  • 

    3320cd8: Update Biome to 2.5.6. No stable (non-nursery) rules were added, removed, or promoted between 2.5.3 and 2.5.6, so the preset configs are unchanged.
    

    • 

  • 

    477cd6e: Update ESLint to 10.8.0 and all ESLint plugins to their latest versions. Highlights:
    

      

    • eslint-plugin-react-doctor 0.9.3: the react preset expands from 149 to 417 rules, adopting the upstream recommended set (react-router, three.js/r3f, ink, motion, remotion, zustand/valtio/mobx, and more) while excluding rules that duplicate already-enabled react, react-hooks, and jsx-a11y rules. The next preset gains nextjs-async-dynamic-api-not-awaited and nextjs-metadata-url-consistency; the tanstack preset gains tanstack-start-missing-scripts, query-floating-mutate-async, and query-no-mutation-in-effect-as-read.
      • 

    • eslint-plugin-unicorn 72: adds no-missing-local-resource, no-multiple-promise-resolver-calls, no-shorthand-property-overrides, no-transition-all, no-unnecessary-string-trim, no-useless-re-export, prefer-then-catch, and require-frontmatter-fields. CSS-only rules are excluded from the preset since they fail config validation for JS files.
      • 

    • eslint-plugin-sonarjs 4.2: adds 11 rules including no-fixed-wait-in-tests, parameterized-tests, assertions-in-test-cases, prefer-native-lodash-alternative, and explicit-test-skip.
      • 

    • typescript-eslint 8.65: @typescript-eslint/no-loop-func and @typescript-eslint/no-restricted-imports were deprecated upstream in favor of the base rules, which now apply to TypeScript files.
      • 

    • eslint-plugin-astro 3: removes astro/no-omitted-end-tags and astro/valid-compile.
      • 

    • eslint-plugin-svelte 3.22: adds no-bind-value-on-checkable-inputs and no-conflicting-module-names; no-restricted-html-elements is now off because its schema requires a user-supplied element list.
      • 

    • @angular-eslint/eslint-plugin 22.1: adds inject-at-top and prefer-service-decorator.
      • 

    

    • 

  • 

    b81578b: Fix the useSortedPackageJson action not being executed by turning on assist actions for package.json-like files.
    

    • 

  • 

    9ec454a: Update oxlint to 1.76.0 and oxfmt to 0.61.0. New stable rules added to the presets: oxc/bad-match-all-arg, id-denylist, node/exports-style (core), react/function-component-definition with arrow-function components (react), and vitest/padding-around-test-blocks (vitest). node/no-top-level-await is off — top-level await is idiomatic in ESM, Astro frontmatter, and build scripts — and the ESLint preset's n/no-top-level-await is now off to match. No rules were removed or promoted out of nursery.
    

    • 

  • 

    ba61c02: Fix generated oxlint.config.ts accessing plugin.name on ExternalPluginEntry without narrowing the string form, which caused a TypeScript error in projects that type-check the config (#753)
    

    • 






... (truncated)





Commits

    

  • 832cb7c Version Packages (#761)
    • 

  • d018b7f Split the CLI bug-scan changeset into per-fix patch changesets
    • 

  • 0dce9f8 Fix CLI bugs found in code audit
    • 

  • 36c7b80 Move @​typescript-eslint/utils to devDependencies
    • 

  • f943483 Version Packages (#756)
    • 

  • 74e671d Add video package with the Ultracite 7.10 fix --codex release video
    • 

  • e089510 Scope framework-specific react-doctor rules to oxlint/next/js-plugins and oxl...
    • 

  • cd0a36c Add --claude and --codex flags to ultracite fix (#760)
    • 

  • 477cd6e Update ESLint and plugins to latest versions
    • 

  • 9ec454a Update oxlint to 1.76.0 and oxfmt to 0.61.0
    • 

  • Additional commits viewable in compare view
    • 







Updates @tailwindcss/postcss from 4.3.2 to 4.3.3



Release notes

Sourced from @​tailwindcss/postcss's releases.




v4.3.3


Fixed


    

  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
    • 

  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
    • 

  • Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
    • 

  • Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
    • 

  • Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
    • 

  • Parse selectors like [data-foo]div as two selectors instead of one (#20303)
    • 

  • Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
    • 

  • Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
    • 

  • Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
    • 

  • Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
    • 

  • Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
    • 

  • Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
    • 

  • Prevent @tailwindcss/upgrade from rewriting ignored files when run from a subdirectory (#20329)
    • 

  • Ensure earlier @source rules pointing to nested files are scanned when later @source rules point to files in parent folders (#20335)
    • 

  • Prevent @tailwindcss/vite from triggering full page reloads when scanned files are processed by Vite but haven't been loaded as modules yet (#20336)
    • 








Changelog

Sourced from @​tailwindcss/postcss's changelog.




[4.3.3] - 2026-07-16


Fixed


    

  • Support --watch --poll[=ms] in @tailwindcss/cli when filesystem events are unreliable or unavailable (#20297)
    • 

  • Canonicalization: match arbitrary hex colors against theme colors case-insensitively (e.g. bg-[#fff] and bg-[#FFF] → bg-white) (#20298)
    • 

  • Prevent Preflight from overriding Firefox's native iframe:focus-visible outline styles (#20292)
    • 

  • Ensure theme('colors.foo') in JS plugins resolves correctly when both --color-foo and --color-foo-bar exist (#20299)
    • 

  • Ensure fractional opacity modifiers work with named shadow sizes like shadow-sm/12.5, text-shadow-sm/12.5, drop-shadow-sm/12.5, and inset-shadow-sm/12.5 (#20302)
    • 

  • Parse selectors like [data-foo]div as two selectors instead of one (#20303)
    • 

  • Ensure @tailwindcss/postcss rebuilds when a preprocessor like Sass changes the input CSS without changing the input file on disk (#20310)
    • 

  • Ensure CSS nesting is handled even when Lightning CSS isn't run, such as in @tailwindcss/browser and Tailwind Play (#20124)
    • 

  • Prevent achromatic theme colors from shifting hue when mixed in polar color spaces like oklch (#20314)
    • 

  • Ensure --spacing(0) is optimized to 0px instead of 0 so it remains a <length> when used in calc(…) (#20319)
    • 

  • Load @parcel/watcher only when needed in @tailwindcss/cli --watch mode, so one-off builds and --watch --poll work when @parcel/watcher can't be loaded (#20325)
    • 

  • Use explicit platform fonts instead of system-ui and ui-sans-serif so CJK text respects the page's lang attribute on Windows (#20318)
    • 

  • Prevent @tailwindcss/upgrade from rewriting ignored files when run from a sub...

    Description has been truncated

    

  
  



      


          

          
  
  

    
  
    
    

  

  

  



                    

          
        





  





    



      

  
            

    

      
    

    


      


          @dependabot
dependabot
Bot



            added
      
  dependencies

  Pull requests that update a dependency file

      
  javascript

  Pull requests that update javascript code

  labels


      Jul 28, 2026

    

  



  

  


    

    

      
    

    


      


          @github-actions
github-actions
Bot



          added
  the 
  chore

  Maintenance / housekeeping
 label


      Jul 28, 2026

    

  



  

  


  

  


  

  


  

  


  

  
  

  
    

        

              @dependabot


        

      

            dependabot
Bot

            force-pushed
    the
        
      
  dependabot/npm_and_yarn/dev-dependencies-ebf774faf4


    
 branch
    from
    381fb00    to
    3ec019d      
    Compare
  



        July 30, 2026 07:07        
        
      

    





  

  


  

  


  

  


  

  


  

  


  

  
  

  
    

        

              @dependabot


        

      

            dependabot
Bot

            force-pushed
    the
        
      
  dependabot/npm_and_yarn/dev-dependencies-ebf774faf4


    
 branch
    from
    3ec019d    to
    f14707f      
    Compare
  



        July 31, 2026 06:05        
        
      

    





  

  


  

  


  

  


  

  


  

  


  

  
  

  
    

        

              @dependabot


        

      

            dependabot
Bot

            force-pushed
    the
        
      
  dependabot/npm_and_yarn/dev-dependencies-ebf774faf4


    
 branch
    from
    f14707f    to
    23d4a63      
    Compare
  



        August 2, 2026 23:59        
        
      

    





  

  


  

  


  

  


  

  


  

  


  

  
  

  
    

        

              @dependabot


        

      

            dependabot
Bot

            force-pushed
    the
        
      
  dependabot/npm_and_yarn/dev-dependencies-ebf774faf4


    
 branch
    from
    23d4a63    to
    2cc2e9b      
    Compare
  



        August 4, 2026 16:34        
        
      

    





  

  









        

  
          

  


  

  


  

  


  

  







        

  
        

  

      

  
  

  
          

  

    

      


  

        
          @dependabot
  




      

        
          chore(deps-dev): bump the dev-dependencies group across 1 directory w…
        

          
                        
      


      

        

    
    
    

  

    


      


      

        

          

    
    
    

  

  

    
  



        

      


      

        
          66dbc5f
        
      

    

  

    

      
…ith 13 updates

Bumps the dev-dependencies group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.4.16` | `2.5.7` |
| [knip](https://github.com/webpro-nl/knip/tree/HEAD/packages/knip) | `6.25.0` | `6.32.0` |
| [lefthook](https://github.com/evilmartians/lefthook) | `2.1.9` | `2.1.10` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.0` | `4.23.11` |
| [turbo](https://github.com/vercel/turborepo) | `2.10.4` | `2.10.9` |
| [ultracite](https://github.com/haydenbleasel/ultracite) | `7.8.3` | `7.10.1` |
| [@tailwindcss/postcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/@tailwindcss-postcss) | `4.3.2` | `4.3.3` |
| [postcss](https://github.com/postcss/postcss) | `8.5.16` | `8.5.26` |
| [prettier](https://github.com/prettier/prettier) | `3.9.4` | `3.9.6` |
| [tailwindcss](https://github.com/tailwindlabs/tailwindcss/tree/HEAD/packages/tailwindcss) | `4.3.2` | `4.3.3` |
| [tsdown](https://github.com/rolldown/tsdown) | `0.22.3` | `0.22.14` |
| [concurrently](https://github.com/open-cli-tools/concurrently) | `10.0.3` | `10.0.4` |
| [@types/mjml-core](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/mjml-core) | `5.0.0` | `5.1.0` |



Updates `@biomejs/biome` from 2.4.16 to 2.5.7
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.7/packages/@biomejs/biome)

Updates `knip` from 6.25.0 to 6.32.0
- [Release notes](https://github.com/webpro-nl/knip/releases)
- [Commits](https://github.com/webpro-nl/knip/commits/knip@6.32.0/packages/knip)

Updates `lefthook` from 2.1.9 to 2.1.10
- [Release notes](https://github.com/evilmartians/lefthook/releases)
- [Changelog](https://github.com/evilmartians/lefthook/blob/master/CHANGELOG.md)
- [Commits](evilmartians/lefthook@v2.1.9...v2.1.10)

Updates `tsx` from 4.23.0 to 4.23.11
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.0...v4.23.11)

Updates `turbo` from 2.10.4 to 2.10.9
- [Release notes](https://github.com/vercel/turborepo/releases)
- [Changelog](https://github.com/vercel/turborepo/blob/main/RELEASE.md)
- [Commits](vercel/turborepo@v2.10.4...v2.10.9)

Updates `ultracite` from 7.8.3 to 7.10.1
- [Release notes](https://github.com/haydenbleasel/ultracite/releases)
- [Commits](https://github.com/haydenbleasel/ultracite/compare/ultracite@7.8.3...ultracite@7.10.1)

Updates `@tailwindcss/postcss` from 4.3.2 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/@tailwindcss-postcss)

Updates `postcss` from 8.5.16 to 8.5.26
- [Release notes](https://github.com/postcss/postcss/releases)
- [Changelog](https://github.com/postcss/postcss/blob/main/CHANGELOG.md)
- [Commits](postcss/postcss@8.5.16...8.5.26)

Updates `prettier` from 3.9.4 to 3.9.6
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/main/CHANGELOG.md)
- [Commits](prettier/prettier@3.9.4...3.9.6)

Updates `tailwindcss` from 4.3.2 to 4.3.3
- [Release notes](https://github.com/tailwindlabs/tailwindcss/releases)
- [Changelog](https://github.com/tailwindlabs/tailwindcss/blob/main/CHANGELOG.md)
- [Commits](https://github.com/tailwindlabs/tailwindcss/commits/v4.3.3/packages/tailwindcss)

Updates `tsdown` from 0.22.3 to 0.22.14
- [Release notes](https://github.com/rolldown/tsdown/releases)
- [Commits](rolldown/tsdown@v0.22.3...v0.22.14)

Updates `concurrently` from 10.0.3 to 10.0.4
- [Release notes](https://github.com/open-cli-tools/concurrently/releases)
- [Commits](open-cli-tools/concurrently@v10.0.3...v10.0.4)

Updates `@types/mjml-core` from 5.0.0 to 5.1.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/mjml-core)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: "@tailwindcss/postcss"
  dependency-version: 4.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: "@types/mjml-core"
  dependency-version: 5.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: concurrently
  dependency-version: 10.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: knip
  dependency-version: 6.29.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: lefthook
  dependency-version: 2.1.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: postcss
  dependency-version: 8.5.24
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: prettier
  dependency-version: 3.9.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: tailwindcss
  dependency-version: 4.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: tsdown
  dependency-version: 0.22.14
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: tsx
  dependency-version: 4.23.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: turbo
  dependency-version: 2.10.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: ultracite
  dependency-version: 7.9.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

    







  








        

  
          

  
  

  
    

        

              @dependabot


        

      

            dependabot
Bot

            force-pushed
    the
        
      
  dependabot/npm_and_yarn/dev-dependencies-ebf774faf4


    
 branch
    from
    2cc2e9b    to
    66dbc5f      
    Compare
  



        August 11, 2026 16:36        
        
      

    





  

  


  

  


  

  


  

  


  

  







        

  
      



  

  @dependabot


    @github




  



    

      

  

    

      
          
      

      
            dependabot
    Bot

      

      

      commented

        on behalf of github

        Aug 13, 2026



      
    


  


  

    

      

          
    
    

  


        
            
  
      
              Copy link

  

            
  
      
              Copy Markdown

  

        
      

    


    

        

  
    Contributor


        

  Author


    

  





      


        



  
    

      
          
Looks like these dependencies are updatable in another way, so this is no longer needed.


      		
    

  





        

            

            

              
            

        

      


      

            
  
  

    
  
    
    

  

  

  


    












        

  
            

    

      
    

    


      


          @dependabot
dependabot
Bot



          closed this


      Aug 13, 2026

    

  


    


  

  
  

  
    

        

              @dependabot


        

      

            dependabot
Bot

        
    deleted the
    
      
        dependabot/npm_and_yarn/dev-dependencies-ebf774faf4
    
    branch

        August 13, 2026 16:51        
        
      

    












  
  

    

      

  










  








  
      

  
    Sign up for free
    to join this conversation on GitHub.
    Already have an account?
    Sign in to comment


  










    
        

  

    
    

    

  

    Reviewers
  


    

    No reviews







  
      

  


      
  

    Assignees
  



        


    No one assigned







  
        


  


  

    Labels
  



    

      
    chore

  Maintenance / housekeeping
  
    dependencies

  Pull requests that update a dependency file
  
    javascript

  Pull requests that update javascript code








  
        

  

    

        

    Projects
  


        




    None yet




  



  
        


  

    
  

    Milestone
  


      No milestone





    
      
          


  

    

      
        

          
  

    Development
  



            


Successfully merging this pull request may close these issues.





  
  



      
    

  




      

  
  
        

  

    

      0 participants