Bump the npm-minor-patch group with 6 updates by dependabot[bot] · Pull Request #105 · daveisadork/solid-sdr

dependabot · 2026-09-15T22:46:40Z

Bumps the npm-minor-patch group with 6 updates:

Package	From	To
@biomejs/biome	`2.5.12`	`2.5.13`
@kobalte/core	`0.13.13`	`0.13.14`
@iconify/json	`2.2.525`	`2.2.527`
@types/node	`26.4.1`	`26.5.1`
tailwind-merge	`3.6.0`	`3.7.0`
vite	`8.2.2`	`8.3.0`

Updates @biomejs/biome from 2.5.12 to 2.5.13

Release notes

Sourced from @biomejs/biome's releases.

Biome CLI v2.5.13

2.5.13

Patch Changes
#11379 07a0073 Thanks @Netail! - Added the nursery rule useLayeredStyles, which enforces that style rules are defined within a cascade layer and import rules to import its styles into a cascade layer.
/* Invalid */
@import 'foo.css';
.my-style {
color: red;
}
/* Valid */
@import 'foo.css' layer(base);
@layer base {
.my-style {
color: red;
}
}
#11667 e997900 Thanks @devtechedge! - Added the nursery rule useBetterDomTraversing, which prefers .firstChild, .firstElementChild, .closest(), and merged .querySelector() calls over positional DOM traversal.
element.childNodes[0];
element.children[0];
element.parentElement.parentElement;
element.querySelector("a").querySelector("b");
#11620 20e513a Thanks @jakeleventhal! - Fixed #11610, #11611, #11612, #11615, and #11616: Biome no longer fully infers an imported generic declaration just to apply its type arguments, restoring type-aware lint performance for large libraries such as Zod. This improves useRegexpExec, noFloatingPromises, noMisusedPromises, useNullishCoalescing, and noUnsafePlusOperands.

#11657 e322040 Thanks @ematipico! - Fixed #7495: noUselessConstructor now ignores TypeScript constructors that forward at least one argument to super, preserving constructors that narrow the subclass's accepted parameter types. The exemption also applies when the parent and child signatures are identical; JavaScript and zero-argument forwarding behavior are unchanged.

#11670 4969ee1 Thanks @ematipico! - Fixed #7076: useAriaPropsForRole and useFocusableInteractive no longer report non-focusable elements with role="separator". A separator with an explicit tabIndex or tabindex still requires aria-valuenow.

#11627 23aad6d Thanks @ematipico! - Fixed #6571 so Grit plugins can capture and inspect multiple named import specifiers.

#11631 00dbd3a Thanks @ematipico! - Reduced unnecessary type inference when type-aware lint rules inspect members of namespace imports from libraries such as Zod. Fixed type inference so blanket re-exports do not expose default exports.
#11628 a2f8ff7 Thanks @dyc3! - Added the nursery rule noXorAsExponentiation, which reports the bitwise XOR operator ^ between two decimal integer literals, where the exponentiation operator ** was likely intended.
const kibibyte = 2 ^ 10; // 8, not 1024

... (truncated)

Changelog

Sourced from @biomejs/biome's changelog.

2.5.13

Patch Changes
#11379 07a0073 Thanks @Netail! - Added the nursery rule useLayeredStyles, which enforces that style rules are defined within a cascade layer and import rules to import its styles into a cascade layer.
/* Invalid */
@import 'foo.css';
.my-style {
color: red;
}
/* Valid */
@import 'foo.css' layer(base);
@layer base {
.my-style {
color: red;
}
}
#11667 e997900 Thanks @devtechedge! - Added the nursery rule useBetterDomTraversing, which prefers .firstChild, .firstElementChild, .closest(), and merged .querySelector() calls over positional DOM traversal.
element.childNodes[0];
element.children[0];
element.parentElement.parentElement;
element.querySelector("a").querySelector("b");
#11620 20e513a Thanks @jakeleventhal! - Fixed #11610, #11611, #11612, #11615, and #11616: Biome no longer fully infers an imported generic declaration just to apply its type arguments, restoring type-aware lint performance for large libraries such as Zod. This improves useRegexpExec, noFloatingPromises, noMisusedPromises, useNullishCoalescing, and noUnsafePlusOperands.

#11657 e322040 Thanks @ematipico! - Fixed #7495: noUselessConstructor now ignores TypeScript constructors that forward at least one argument to super, preserving constructors that narrow the subclass's accepted parameter types. The exemption also applies when the parent and child signatures are identical; JavaScript and zero-argument forwarding behavior are unchanged.

#11670 4969ee1 Thanks @ematipico! - Fixed #7076: useAriaPropsForRole and useFocusableInteractive no longer report non-focusable elements with role="separator". A separator with an explicit tabIndex or tabindex still requires aria-valuenow.

#11627 23aad6d Thanks @ematipico! - Fixed #6571 so Grit plugins can capture and inspect multiple named import specifiers.

#11631 00dbd3a Thanks @ematipico! - Reduced unnecessary type inference when type-aware lint rules inspect members of namespace imports from libraries such as Zod. Fixed type inference so blanket re-exports do not expose default exports.
#11628 a2f8ff7 Thanks @dyc3! - Added the nursery rule noXorAsExponentiation, which reports the bitwise XOR operator ^ between two decimal integer literals, where the exponentiation operator ** was likely intended.
const kibibyte = 2 ^ 10; // 8, not 1024
#11670 4969ee1 Thanks @ematipico! - Fixed #7192: noUnusedPrivateClassMembers now considers compound assignments such as ??= to read and use private class members.

... (truncated)

Commits

810ea56 ci: release (#11614)
e997900 feat(linter): add useBetterDomTraversing nursery rule (#11667)
de0528f feat(lint/html/svelte): add noSvelteAtHtmlTags (#11606)
07a0073 feat(css_analyze): implement useLayeredStyles (#11379)
c23e4c7 feat: noUnsafeIframeSandbox (#11622)
a2f8ff7 feat(lint/js): add noXorAsExponentiation (#11628)
a64d757 feat(lint/js/vue): add useVueBaseImport (#11595)
611767f chore: update depot logo (#11602)
See full diff in compare view

Updates @kobalte/core from 0.13.13 to 0.13.14

Release notes

Sourced from @kobalte/core's releases.

@kobalte/core@0.13.14

Patch Changes

3d326634: ## v0.13.14 (September 7, 2026)

Bug fixes

Preserve aria-hidden during modal handoff (#721)

Resolve interact-outside targets across shadow boundaries (#722)

Combobox: Prevent filter reset on blur (#731)

Commits

675b4a1 chore: prepare release 0.13.14 (#732)
de408bf fix: resolve interact-outside targets across shadow boundaries (#722)
513890d fix(combobox): prevent filter reset on blur (#731)
f75e629 docs: fix ColorArea anatomy example (#729)
3d32663 fix: preserve aria-hidden during modal handoff (#721)
f1e1bc4 chore: update readme (#711)
See full diff in compare view

Updates @iconify/json from 2.2.525 to 2.2.527

Commits

803f572 Update 14 icon sets
239eabd Update 14 icon sets
ad78489 Update CONTRIBUTING.md with clearer guideline
See full diff in compare view

Updates @types/node from 26.4.1 to 26.5.1

Commits

See full diff in compare view

Updates tailwind-merge from 3.6.0 to 3.7.0

Release notes

Sourced from tailwind-merge's releases.

tailwind-merge@3.7.0

New Features

Prepare some upcoming changes by @dcastil in dcastil/tailwind-merge#713

Theme getters returned by fromTheme now expose the theme key they read as a themeKey property, so tooling can identify the referenced theme scale without calling the getter.

Release tags now include the package name, starting with tailwind-merge@3.7.0.

Bug Fixes

Fix arbitrary values using color() or light-dark() being classified as lengths instead of colors by @ddussi in dcastil/tailwind-merge#712

Fix bare bg-conic not merging with other background image classes by @dcastil in dcastil/tailwind-merge#708

Fix columns-auto not conflicting with other columns classes by @dcastil in dcastil/tailwind-merge#707

Fix container sizes like inline-2xl not merging by @dcastil in dcastil/tailwind-merge#706

Fix max-h-none missing in max-h class group by @mutewinter in dcastil/tailwind-merge#704

Fix axis shorthands like px not overriding logical sides like ps by @dcastil in dcastil/tailwind-merge#705

Fix leading-none being removed when the leading theme scale is overridden by @chatman-media in dcastil/tailwind-merge#689

Fix deprecated shadow-inner being classified as shadow color instead of shadow by @dcastil in dcastil/tailwind-merge#703

Documentation

Add Deno to install instructions by @bartlomieju in dcastil/tailwind-merge#687

Add missing text-shadow theme key to configuration docs by @dcastil in dcastil/tailwind-merge@3e6d208

Other

Switch package manager from yarn to pnpm by @dcastil in dcastil/tailwind-merge#680

Harden CI security by @dcastil in dcastil/tailwind-merge#679

Full Changelog: v3.6.0...v3.7.0

Thanks to @brandonmcconnell, @manavm1990, @langy, @roboflow, @syntaxfm, @getsentry, @codecov, a private sponsor, @openclaw, @sourcegraph, @cesarvcanal, @CasperKristiansson, @jbisasky, @frontendmasters and more via @thnxdev for sponsoring tailwind-merge! ❤️

Commits

511d68a tailwind-merge@3.7.0
2461127 Release tooling: Pass the namespaced tag prefix and commit message to pnpm's ...
9d41508 add changelog for tailwind-merge@3.7.0
c78a80f Configurator: Reuse runtime lookups during pruning
49c317d Monorepo: Fix contributing link and include package coverage
7b565ca Configurator: prune a generated config to a project's used classes (core step)
d83e013 Releases: auto-re-pin tag-pinned links on every version bump
b71fd41 Docs: pin every in-repo file link to a release tag instead of main
ee29441 Docs: point the ThemeObject JSDoc link at the packaged docs location
9521b10 Releases: per-package pipeline with namespaced tags
Additional commits viewable in compare view

Updates vite from 8.2.2 to 8.3.0

Release notes

Sourced from vite's releases.

create-vite@8.3.0

Please refer to CHANGELOG.md for details.

v8.3.0

Features

build: avoid settling seen preload dependencies for performance (#23446) (e6f6b3e)

Bug Fixes

handle CRLF line endings in code frame positions (#23219) (9913672)

only treat whole node_modules path segments as dependencies (fix #17467) (#23437) (ef0dc17)

Performance Improvements

proxy: pre-compile context matchers at server creation (#23263) (8abf700)

v8.3.0-beta.1

Features

devtools: enable dev server integration (#23333) (68aeb8a)

Bug Fixes

build: keep hash placeholders as-is in resolveFileUrl hook (#23422) (e8d6a4d)

bundled-dev: mark payload delivered on client report (#23373) (a6d43bc)

deps: update all non-major dependencies (#23445) (fc7c104)

html: don't inline preload link targets (fix #13355) (#23387) (12e709c)

resolve the actual package root in findNearestMainPackageData for nested package.json (#23356) (8492422)

shortcuts extend error (#23447) (4ec58d1)

Miscellaneous Chores

introducing @e18e/eslint-plugin (#23357) (f794133)

remove unnecessary comment (#23448) (b919a1a)

v8.3.0-beta.0

Features

accept Rolldown watch options in server.watch (#23133) (1b5cfe3)

add closeServer and closePreviewServer hooks (#23110) (e17d2d5)

add top-level tsconfig option (#23310) (93164c3)

add warning for unsupported hooks in plugin returned from applyToEnvironment hook (#23191) (fdef04f)

cli: support naming the CPU profile via --profile [name] (#23042) (a500dee)

config: warn on named imports from JSON modules (#23378) (472385e)

css: minify style tag (#23183) (8156684)

searched params attached to workers are now preserved (#22280) (517b97f)

support subpath imports in dynamic import statements (#23185) (b78e2f1)

use import.meta.ROLLDOWN_FILE_URL_* for assets in JS (#22888) (4366ac4)

use import.meta.ROLLDOWN_FILE_URL_* for other plugins (#22894) (e38f29e)

... (truncated)

Changelog

Sourced from vite's changelog.

8.3.0 (2026-09-10)

Features

build: avoid settling seen preload dependencies for performance (#23446) (e6f6b3e)

devtools: enable dev server integration (#23333) (68aeb8a)

accept Rolldown watch options in server.watch (#23133) (1b5cfe3)

add closeServer and closePreviewServer hooks (#23110) (e17d2d5)

add top-level tsconfig option (#23310) (93164c3)

add warning for unsupported hooks in plugin returned from applyToEnvironment hook (#23191) (fdef04f)

cli: support naming the CPU profile via --profile [name] (#23042) (a500dee)

config: warn on named imports from JSON modules (#23378) (472385e)

css: minify style tag (#23183) (8156684)

searched params attached to workers are now preserved (#22280) (517b97f)

support subpath imports in dynamic import statements (#23185) (b78e2f1)

use import.meta.ROLLDOWN_FILE_URL_* for assets in JS (#22888) (4366ac4)

use import.meta.ROLLDOWN_FILE_URL_* for other plugins (#22894) (e38f29e)

worker: remove worker chunk if it's detected that it's not referenced (#22473) (924997a)

Bug Fixes

handle CRLF line endings in code frame positions (#23219) (9913672)

only treat whole node_modules path segments as dependencies (fix #17467) (#23437) (ef0dc17)

build: keep hash placeholders as-is in resolveFileUrl hook (#23422) (e8d6a4d)

bundled-dev: mark payload delivered on client report (#23373) (a6d43bc)

deps: update all non-major dependencies (#23445) (fc7c104)

html: don't inline preload link targets (fix #13355) (#23387) (12e709c)

resolve the actual package root in findNearestMainPackageData for nested package.json (#23356) (8492422)

shortcuts extend error (#23447) (4ec58d1)

config: close bundles when generation fails (#23256) (6bacc95)

css: keep newline-separated srcset candidates intact (#23265) (4f9d2f4)

deps: update all non-major dependencies (#23337) (d550815)

deps: update all non-major dependencies (#23404) (238ad81)

deps: update rolldown-related dependencies (#23338) (76e8082)

deps: update rolldown-related dependencies (#23405) (b882566)

dev: run closeBundle after buildEnd failure (#23165) (8cb872e)

hmr: handle import.meta.hot.invalidate in virtual module (#23171) (6162968)

utils: handle dot in srcset density descriptor (#23346) (b50e1b4)

utils: match timestamp query parameter with proper delimiters (#23364) (41f3c6f)

Performance Improvements

proxy: pre-compile context matchers at server creation (#23263) (8abf700)

Miscellaneous Chores

introducing @e18e/eslint-plugin (#23357) (f794133)

remove unnecessary comment (#23448) (b919a1a)

delete unused PluginContainerOptions (#23382) (ee64401)

use oxfmt sortImports (#23319) (97ad042)

... (truncated)

Commits

95e8923 release: v7.3.1
9d39d37 feat: add ignoreOutdatedRequests option to optimizeDeps (#21364)
acf7e05 release: v7.3.0
cff26ec feat(deps): update esbuild from ^0.25.0 to ^0.27.0 (#21183)
317b3b2 release: v7.2.7
721f163 fix: plugin shortcut support (#21211)
bda5dbb release: v7.2.6
3aa7527 release: v7.2.5
72e398a fix(deps): update all non-major dependencies (#21175)
3765f7b fix: shortcuts not rebound after server restart (#21166)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm-minor-patch group with 6 updates: | Package | From | To | | --- | --- | --- | | [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.12` | `2.5.13` | | [@kobalte/core](https://github.com/kobaltedev/kobalte) | `0.13.13` | `0.13.14` | | [@iconify/json](https://github.com/iconify/icon-sets) | `2.2.525` | `2.2.527` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.4.1` | `26.5.1` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` | | [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite) | `8.2.2` | `8.3.0` | Updates `@biomejs/biome` from 2.5.12 to 2.5.13 - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.13/packages/@biomejs/biome) Updates `@kobalte/core` from 0.13.13 to 0.13.14 - [Release notes](https://github.com/kobaltedev/kobalte/releases) - [Commits](https://github.com/kobaltedev/kobalte/compare/@kobalte/core@0.13.13...@kobalte/core@0.13.14) Updates `@iconify/json` from 2.2.525 to 2.2.527 - [Commits](iconify/icon-sets@2.2.525...2.2.527) Updates `@types/node` from 26.4.1 to 26.5.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `tailwind-merge` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge) Updates `vite` from 8.2.2 to 8.3.0 - [Release notes](https://github.com/vitejs/vite/releases) - [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.md) - [Commits](https://github.com/vitejs/vite/commits/create-vite@8.3.0/packages/vite) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.5.13 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@kobalte/core" dependency-version: 0.13.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@iconify/json" dependency-version: 2.2.527 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: npm-minor-patch - dependency-name: "@types/node" dependency-version: 26.5.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: tailwind-merge dependency-version: 3.7.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: npm-minor-patch - dependency-name: vite dependency-version: 8.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: npm-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 15, 2026

dependabot Bot requested a review from daveisadork as a code owner September 15, 2026 22:46

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 15, 2026

daveisadork merged commit 1e4c2c8 into main Sep 15, 2026
1 check passed

daveisadork deleted the dependabot/npm_and_yarn/npm-minor-patch-82508d0edf branch September 15, 2026 23:00

Navigation Menu

Bump the npm-minor-patch group with 6 updates - #105

Bump the npm-minor-patch group with 6 updates#105
daveisadork merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-minor-patch-82508d0edf

dependabot Bot commented on behalf of github Sep 15, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 15, 2026

Biome CLI v2.5.13

2.5.13

Patch Changes

2.5.13

Patch Changes

@​kobalte/core@​0.13.14

Patch Changes

tailwind-merge@3.7.0

New Features

Bug Fixes

Documentation

Other

create-vite@8.3.0

v8.3.0

Features

Bug Fixes

Performance Improvements

v8.3.0-beta.1

Features

Bug Fixes

Miscellaneous Chores

v8.3.0-beta.0

Features

8.3.0 (2026-09-10)

Features

Bug Fixes

Performance Improvements

Miscellaneous Chores

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`@kobalte/core@0`.13.14