Skip to content

build(deps-dev): bump @biomejs/biome from 2.5.11 to 2.6.4 - #572

Merged
Vivswan merged 7 commits into
mainfrom
dependabot/bun/biomejs/biome-2.6.3
Nov 3, 2026
Merged

Vivswan merged 7 commits into
mainfrom
dependabot/bun/biomejs/biome-2.6.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026 •

Copy link
Copy Markdown
Contributor

What this changes

$ bun run lint                                  # biome 2.6.4, the fleet's pin
before  Found 81 errors.                        # 46 docs and 35 YAML fixtures not in biome 2.6's format
after   Checked 1041 files. No fixes applied.   # 0 errors, 0 infos
| Pin | Points at |   ->   | Pin  | Points at    |   docs: tables padded, * bullets -> -, code fences reflowed
{id: 1, name: CI}     ->   { id: 1, name: CI }      fixtures: flow mappings padded, 'single quotes' around a scalar holding "
---                 stays  ---                      frontmatter parsed as frontmatter (markdown.parser.frontmatter, from the fleet floor)
order: 1                   order: 1

How

  • biome 2.6.4, the version the fleet pins; this PR carries the platform sync (chore: sync repo-platform build 3960c655758a #578) that moves the managed biome.json, .yamllint, and two shipped files, since neither PR passes alone.
  • Docs and fixtures are biome's own output; nothing is switched off in config.
  • Generated regions: the generators write each region as biome formats it and judge a committed region's content with its tables respelled, so padding is biome's and content is the generator's.
  • Two table cells carry the release-please marker before the version; after it, biome widens the column on every pass.
  • Docs tests read tables through mdast instead of by exact spelling.

Proof

  • lint 0, tsc 0, knip 0, build:check 14/14, yamllint 0, e2e 373/373, bun test 4620 pass, 0 fail.

Bumps @biomejs/biome from 2.5.11 to 2.6.3.

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.6.3

2.6.3

Patch Changes

  • #12275 807e616 Thanks @​dyc3! - Added the new nursery rule noArraySortForMinMax, which reports sorting an array only to read its smallest or largest value. Use Math.min() or Math.max() instead.

    const minimum = array.toSorted((a, b) => a - b)[0];
  • #12432 cf61682 Thanks @​dyc3! - Added the nursery rule noBooleanSortComparator, which reports sort comparators that return a boolean instead of a number. For example, array.sort((a, b) => a > b) never puts the first item before the second, so the array isn't sorted correctly.

  • #12304 b4654c5 Thanks @​dyc3! - Added the new nursery rule noEagerArrayMethodsInLoops, which reports .map() and .filter() calls in the header of for...of loops. These calls build a new array that is only used by the loop.

    for (const name of users.map((user) => user.name)) {
      console.log(name);
    }
  • #12121 66c3791 Thanks @​dyc3! - Added the nursery rule noNewRequire, which disallows calling require with new, such as new require("app-header").

  • #12316 34b520d Thanks @​dyc3! - Added the new nursery rule noObsoleteAttributes, which disallows obsolete attributes on HTML elements and suggests what to use instead.

    <table bgcolor="#ffffff" cellpadding="5"></table>
  • #12258 cce2385 Thanks @​dyc3! - Added the nursery rule noPathConcat, which disallows building file paths and URLs by joining strings to __dirname, __filename, import.meta.dirname, import.meta.filename, or import.meta.url.

    const fullPath = __dirname + "/foo.js"; // reported
  • #12287 e12ad78 Thanks @​dyc3! - Added the new nursery rule noPlaywrightNthMethods, which disallows selecting Playwright elements by position with first(), last(), and nth(). A test that relies on the position of an element can act on a different element when the page changes.

    await page.locator("button").first().click();
  • #12343 62ad123 Thanks @​vibbix! - Added the nursery rule noSelfNestedLayer, which disallows nesting a cascade layer inside a layer with the same name. Layer names inside an @layer block are relative to it, so the inner layer below creates the sublayer components.components instead of adding to components.

    @layer components {
      @layer components {
        .button {
          color: red;
        }

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) from 2.5.11 to 2.6.3.
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/CHANGELOG_v1.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.6.3/packages/@biomejs/biome)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.6.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Dependency updates label Nov 1, 2026
@dependabot
dependabot Bot requested a review from Vivswan as a code owner November 1, 2026 17:08
@dependabot dependabot Bot added the javascript Pull requests that update javascript code label Nov 1, 2026
@github-actions

github-actions Bot commented Nov 1, 2026

Copy link
Copy Markdown
Contributor

File size check

0 over a hard cap (fails), 6 warning(s).

File Size Tier Cap
src/engine/diff.ts:56 11 comment lines warn 10
src/github/api-error.ts:9 11 comment lines warn 10
src/problem.ts:73 18 comment lines warn 10
src/sections/contract/errors.ts:13 11 comment lines warn 10
src/sections/contract/module.ts:55 12 comment lines warn 10
src/sections/shared/list/decl.ts:265 14 comment lines warn 10

Split the file, wrap the line, shorten or exempt the comment, or list the path in .file-size-allow.local with a # reason.

5 managed file(s) skipped; repo-platform owns them.

@github-actions

github-actions Bot commented Nov 1, 2026

Copy link
Copy Markdown
Contributor

Member shape check

1 finding(s).

File Line Rule
test/sections/contract/validate-hook.test.ts 80 all-or-none

Add the blank lines, make the comment one line directly above the item, comment every field or none, or list the path in .member-shape-allow.local with a # reason.

4 generated file(s) skipped.

@Vivswan
Vivswan enabled auto-merge (squash) November 2, 2026 04:56
@Vivswan
Vivswan disabled auto-merge November 2, 2026 08:33
biome 2.6 formats Markdown and YAML by default; the docs and the test fixtures are its output. The one config line, markdown.parser.frontmatter, keeps a frontmatter block from being read as a heading. The doc generators write each region as biome formats it and judge a committed region's content with its tables respelled, so padding is biome's and content is the generator's. The release-please marker moves before the version in two table cells, where biome's output is stable. The docs tests read tables through mdast instead of by spelling.
@Vivswan
Vivswan force-pushed the dependabot/bun/biomejs/biome-2.6.3 branch from ae47a89 to a16b214 Compare November 2, 2026 09:36
Vivswan and others added 4 commits November 2, 2026 16:09
…tter key from the floor

The fleet pins one biome, the version the managed biome.json names, now 2.6.4 after the platform sync merged into this branch. The devDependency and its lock follow. The managed biome.json carries markdown.parser.frontmatter, so the repository's own copy of the key goes.
@Vivswan Vivswan changed the title build(deps-dev): bump @biomejs/biome from 2.5.11 to 2.6.3 build(deps-dev): bump @biomejs/biome from 2.5.11 to 2.6.4 Nov 3, 2026
@Vivswan
Vivswan merged commit 4d0fb8c into main Nov 3, 2026
29 checks passed
@Vivswan
Vivswan deleted the dependabot/bun/biomejs/biome-2.6.3 branch November 3, 2026 03:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant